Static task
static1
Behavioral task
behavioral1
Sample
0d4296a011a2fa072197e60161a61a80.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d4296a011a2fa072197e60161a61a80.dll
Resource
win10v2004-20231222-en
General
-
Target
0d4296a011a2fa072197e60161a61a80
-
Size
285KB
-
MD5
0d4296a011a2fa072197e60161a61a80
-
SHA1
3343de45593f7ea3816322e29dcb2bffe23c19ba
-
SHA256
17af24456d46e5696c9f493e3576c69780f3534583a4afb0f69a1c30bf1ae22b
-
SHA512
68b51607f976cd156cb187f34de2c1daeaebe1a0c1ba5bfdd2b0713172e9d4ee4574f3af1d01def36791099bea0b4567daad0a1dc363100e5a5c87f5a370ab41
-
SSDEEP
6144:y8kNzdk+G2/+Xq8h01rXaUx+eg8yno9CbiGYeuiNdDtcw8:k9ec/+XLq1Tqeg8ynooGGZfL
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d4296a011a2fa072197e60161a61a80
Files
-
0d4296a011a2fa072197e60161a61a80.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 404KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 277KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE