CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
7cd35d051f0f6e4c1a7b477e8298e8ab.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7cd35d051f0f6e4c1a7b477e8298e8ab.dll
Resource
win10v2004-20231215-en
General
-
Target
7cd35d051f0f6e4c1a7b477e8298e8ab
-
Size
38KB
-
MD5
7cd35d051f0f6e4c1a7b477e8298e8ab
-
SHA1
92485117aeeaecfbcc9b22248acb9242129335d5
-
SHA256
c253c433e4366eeee5d2bbe1977428aba2d96ab38f187d6e5408ac566975bd98
-
SHA512
f05bbcb2057616833e3a363beb31126763a26bf62f00bd35f4fa4c2a8d9effca150d987694e9482922fdd22b68a1c4f2e268dd50b1d06c067a32f47a3a477384
-
SSDEEP
768:CRZ1aPk9CC8Lp1XnSyzv/kn3Q0JUq8BoEAVq5prq8oBCws:ijG1CAnk3DuxSVq+4ws
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cd35d051f0f6e4c1a7b477e8298e8ab
Files
-
7cd35d051f0f6e4c1a7b477e8298e8ab.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.packed Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE