Behavioral task
behavioral1
Sample
ac57dfddc91019013c78c0842d22398b940ad00db1b5b8b4914e92c30b18c271.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ac57dfddc91019013c78c0842d22398b940ad00db1b5b8b4914e92c30b18c271.dll
Resource
win10v2004-20230915-en
General
-
Target
ac57dfddc91019013c78c0842d22398b940ad00db1b5b8b4914e92c30b18c271
-
Size
29KB
-
MD5
bbe28a723258c30cf9c83080d00e11ff
-
SHA1
b4284caa7a5f8460cda8c0ef1fe70174fd25df3b
-
SHA256
ac57dfddc91019013c78c0842d22398b940ad00db1b5b8b4914e92c30b18c271
-
SHA512
58b95ff3bcb23aefc083bb79193ac37b36eca22220b7d566bf5ef7e88c4702bf59f61cf8d1dd4994379c59f67657fe23f9f3922976c8c1a7c6caebcf57813567
-
SSDEEP
768:I9VL5l9otYlLANy2Ep8WymlRaHnesj9pJeTshninbcuyD7UJb:M+O4XZmmHesxnl8nouy8h
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac57dfddc91019013c78c0842d22398b940ad00db1b5b8b4914e92c30b18c271
Files
-
ac57dfddc91019013c78c0842d22398b940ad00db1b5b8b4914e92c30b18c271.dll windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE