Behavioral task
behavioral1
Sample
281e64fbd79c10b926fcb6ac67e2ff83.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
281e64fbd79c10b926fcb6ac67e2ff83.dll
Resource
win10v2004-20231215-en
General
-
Target
281e64fbd79c10b926fcb6ac67e2ff83
-
Size
97KB
-
MD5
281e64fbd79c10b926fcb6ac67e2ff83
-
SHA1
59196daf4cc3b0dbfb47719d6bfbe33fa6b6104b
-
SHA256
46dbe4a70c3b3bafe2f2279eae172c11f596c0bb49f12ef77c554b2239cf9bfe
-
SHA512
db622f5f484cc1be5e9cdb7752b209b3b0d59214a0b013910f4c9791cf3737672f4095ae7e266b58f1448296c3a3d7ce83128b047738b28f2d29673e92f20517
-
SSDEEP
3072:XymkHYDCR/tVrxrRz/KHs54zuETcvG9dl/+:XUHYDCdtVvr1E/dE
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 281e64fbd79c10b926fcb6ac67e2ff83
Files
-
281e64fbd79c10b926fcb6ac67e2ff83.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE