Behavioral task
behavioral1
Sample
2ce572a38482631b5ae4d636afb1a6d5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2ce572a38482631b5ae4d636afb1a6d5.dll
Resource
win10v2004-20231215-en
General
-
Target
2ce572a38482631b5ae4d636afb1a6d5
-
Size
13KB
-
MD5
2ce572a38482631b5ae4d636afb1a6d5
-
SHA1
008d1738e11e1145a729fcf7ad7bbf3b40db671a
-
SHA256
7868835ff72f2a21c702f3391d3cd1f61d4c2236e43807cbda1019f6b3a8e1c2
-
SHA512
6c6e516a9d28e971411343b27c77e1fb5ee0a6930e15cc6ac2167d5e44365d512ed3ae7cddde0d194cf0528e6852c5fa1f523295497e507cee737d94981e30dc
-
SSDEEP
192:RK1ChUZmj8fcm517rX1LVJY+zXUrvqVc+WQuu7e/UvzzouBV4iqzcyFaNJhLkwcS:XYcc9YcU22M3zB2iqTaNJawcudoD7U
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ce572a38482631b5ae4d636afb1a6d5
Files
-
2ce572a38482631b5ae4d636afb1a6d5.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE