Static task
static1
Behavioral task
behavioral1
Sample
208601c86066c950673e3f03626dc09b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
208601c86066c950673e3f03626dc09b.dll
Resource
win10v2004-20231215-en
General
-
Target
208601c86066c950673e3f03626dc09b
-
Size
24KB
-
MD5
208601c86066c950673e3f03626dc09b
-
SHA1
2a483bbc69be89c56524653a5a003e942ef3c2cc
-
SHA256
e0c7007238c113f363cadc18914061680e82f3e20e9dfde6e188344d93db609a
-
SHA512
78378f21cd704c9a50dcce4c32c805bacc858c7e003a98c1709aa980725a544e477ea00d507d844a734be09756d240758704ab0f3e815c0f2c3d6a6f8df47543
-
SSDEEP
768:SpMGQuW00SXm8qcZ1augDdkfc5qJumUWPsYIY0:SyGQDSXmQMdklumUWPsYZ
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 208601c86066c950673e3f03626dc09b
Files
-
208601c86066c950673e3f03626dc09b.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.packed Size: - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE