Behavioral task
behavioral1
Sample
081a2cf2b55663ab57eb41eeecc1e03d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
081a2cf2b55663ab57eb41eeecc1e03d.dll
Resource
win10v2004-20231222-en
General
-
Target
081a2cf2b55663ab57eb41eeecc1e03d
-
Size
98KB
-
MD5
081a2cf2b55663ab57eb41eeecc1e03d
-
SHA1
09479d3abd41f1b284b94d19b93f35af54b95dec
-
SHA256
429ee2644a693084be60d9a1198036c81d5e2fe2289fbb0db9b4d24751580ad1
-
SHA512
d6f1582d4daa3ba6ea3ecf92224e0378fa8822968182148f491d2806fd1e066a36382bca88ac1978b65f722c1c1cda46fe1f3ca851c309a653d5a30c1ce25fbd
-
SSDEEP
3072:vL7ijM0KG0b437pV4BqDSZk0sdra2symfSlo8:jWRKVb43qaaRT1fSlp
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 081a2cf2b55663ab57eb41eeecc1e03d
Files
-
081a2cf2b55663ab57eb41eeecc1e03d.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE