Behavioral task
behavioral1
Sample
119c7e9307b2eda2e457ae0fc2d23b2c.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
119c7e9307b2eda2e457ae0fc2d23b2c.dll
Resource
win10v2004-20231215-en
General
-
Target
119c7e9307b2eda2e457ae0fc2d23b2c
-
Size
97KB
-
MD5
119c7e9307b2eda2e457ae0fc2d23b2c
-
SHA1
17bb5e773fc92ca32b406cbc37e468a23959469f
-
SHA256
ade646a3c7ce26dd69073a95963cb000635a2f655a7397c358258daabc057d43
-
SHA512
7cd8db9ae31bc44d409ec9dd4b2cc28c5ff248b046a67fc2a6855c39d45868d2c7bf53e7a64016c40d283be65a72df97c6411c17644842619e657c3c3e798f4c
-
SSDEEP
3072:BbmMjkplNcxmOaLvBX5cmBCTLuP8VvbHeZax2a/:JmMe7cEOaLvkVW8peC/
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 119c7e9307b2eda2e457ae0fc2d23b2c
Files
-
119c7e9307b2eda2e457ae0fc2d23b2c.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE