_�����ӳ���
Behavioral task
behavioral1
Sample
216b9bf7b00c92b0e535317b1544a3515e6399cc9f9be8a013b806b586e0e45e.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
216b9bf7b00c92b0e535317b1544a3515e6399cc9f9be8a013b806b586e0e45e.dll
Resource
win10v2004-20230703-en
General
-
Target
216b9bf7b00c92b0e535317b1544a3515e6399cc9f9be8a013b806b586e0e45e
-
Size
345KB
-
MD5
45287ec999d464c01f35cdb5f284f561
-
SHA1
03d1a4839bc8261653f41a39f3d1288f70fe817e
-
SHA256
216b9bf7b00c92b0e535317b1544a3515e6399cc9f9be8a013b806b586e0e45e
-
SHA512
2341a08f5594e8bf4a2051e46df2d0c03bee1a7a0b84b5aa2f621a5eda85572de6daef038af9a2752ca8ba072346b4e3731dc28483576937ee515392f98f5af9
-
SSDEEP
6144:7XzlOCwkoqXpjJPJpzpSLAa1TFhDFhy+VTeiXR+A2dmlR+nqn/clvgW476adXoSI:7XpO6oqXVfSZTnL6S5/clFuXoSI
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 216b9bf7b00c92b0e535317b1544a3515e6399cc9f9be8a013b806b586e0e45e
Files
-
216b9bf7b00c92b0e535317b1544a3515e6399cc9f9be8a013b806b586e0e45e.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 1000KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 336KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE