0b84f171004850c37ce3d78d4cb17a6b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b84f171004850c37ce3d78d4cb17a6b
Size

25KB
MD5

0b84f171004850c37ce3d78d4cb17a6b
SHA1

2d1290b6bf0b7c1d08ccf618256d5c3c867f092a
SHA256

dd7407ed33fec46ed1b006d3350ca277fdbe8dc62540491304f974d9bd29bc79
SHA512

ae1aec86c1ef2e697e57a62e2f58e4e35ff800f79441115928dc3dcaeada5bcda5e3a6ba59b05c469198458da96facef58bdea5048fad9e8336fa50213901458
SSDEEP

768:pyFdb0s0op4xTrkYn0D5vX07AudE7ZFdZF6f:EFuIp4SYEBiuv56f

Score

7^/10

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b84f171004850c37ce3d78d4cb17a6b

Files

0b84f171004850c37ce3d78d4cb17a6b
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_Java_sun_plugin_security_WSeedGenerator_generateSeed@12
_Java_sun_plugin_services_WinRegistry_getWindowsDirectory@8
_Java_sun_plugin_services_WinRegistry_initIDs@8
_Java_sun_plugin_services_WinRegistry_sysCloseKey@12
_Java_sun_plugin_services_WinRegistry_sysCreateKey@20
_Java_sun_plugin_services_WinRegistry_sysDeleteKey@16
_Java_sun_plugin_services_WinRegistry_sysOpenKey@20
_Java_sun_plugin_services_WinRegistry_sysQueryKey@16
_Java_sun_plugin_services_WinRegistry_sysSetStringValue@20

Sections

.packed
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RLPack
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE