ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
2096c1b026fcbdb357d06ddead59e1c1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2096c1b026fcbdb357d06ddead59e1c1.dll
Resource
win10v2004-20231215-en
General
-
Target
2096c1b026fcbdb357d06ddead59e1c1
-
Size
12KB
-
MD5
2096c1b026fcbdb357d06ddead59e1c1
-
SHA1
006c8563324f19172404c8d724ed8c082fc309cf
-
SHA256
328f6c8f5cb3806464e57ea935b600242c054f60caa50dad0efb978719cc6b0e
-
SHA512
0d684bc8082702fe53e15290d82d8552bf97b4ce138d28c5de2017bc35ea4bf5f908970f8a893dee88650a44b6a49f3b4c969af3d5ff2b90e03c3fd3c9b639fa
-
SSDEEP
192:VAgGUW3uHONXzcirpo04PJJXOXPwDxtW6jyxELY5nWl/WhvWvzbs:DBOlcilo0YwYK62tnWRWhvW7Y
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2096c1b026fcbdb357d06ddead59e1c1
Files
-
2096c1b026fcbdb357d06ddead59e1c1.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.CQSN Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CQSN Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CQSN Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE