CPlApplet
Behavioral task
behavioral1
Sample
984e22e072303d0003f3e3ca48f320a3b707862a88e436a3a4ed348d42168f62.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
984e22e072303d0003f3e3ca48f320a3b707862a88e436a3a4ed348d42168f62.dll
Resource
win10v2004-20231020-en
General
-
Target
984e22e072303d0003f3e3ca48f320a3b707862a88e436a3a4ed348d42168f62
-
Size
485KB
-
MD5
d549bdd3d72fa98a9c24374a53f809eb
-
SHA1
666ceaa8dbe87e96965f5ad2a8e7e76f18d740aa
-
SHA256
984e22e072303d0003f3e3ca48f320a3b707862a88e436a3a4ed348d42168f62
-
SHA512
a14f9ee8348ab5da8b63b66981701054d420ba71090074c94e7d9775b13ac07f0b6a094eb2bdfad8c017ab6e5de5b8ce23ef776699fff9947c59d21404958ffe
-
SSDEEP
12288:dp2uRys9320T8WytWR2KZ8l8EXjZpKQaoB8oS:d842Q8WyQXuXjZUQaoB
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 984e22e072303d0003f3e3ca48f320a3b707862a88e436a3a4ed348d42168f62
Files
-
984e22e072303d0003f3e3ca48f320a3b707862a88e436a3a4ed348d42168f62.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 477KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE