Static task
static1
Behavioral task
behavioral1
Sample
0e7db4fd0b147e0cea158f9d4cf87dce.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e7db4fd0b147e0cea158f9d4cf87dce.dll
Resource
win10v2004-20231215-en
General
-
Target
0e7db4fd0b147e0cea158f9d4cf87dce
-
Size
77KB
-
MD5
0e7db4fd0b147e0cea158f9d4cf87dce
-
SHA1
01ddc2a238bedeabb1e64f7434d771001f2086d7
-
SHA256
e0dfd8999c2cdbf4b47c897eaff6c9b22559d83b104d300bfd70f5cd13b69ae9
-
SHA512
c37dbb9577d473c3f9f9a95a4a81d8f999cbf6e20883f32da873991a6150c2e784dbcddf1fc05695a047faa59170aaa17853003e6f8e17cd3bcddad487c47af9
-
SSDEEP
1536:WD0uGBoHVaenmFwtG6kCUjlYIIxXoHQDBKn4GCfrKWFIHuOXVSR:WD0ZoHVvncwtkPj2j7Don49ThOMR
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e7db4fd0b147e0cea158f9d4cf87dce
Files
-
0e7db4fd0b147e0cea158f9d4cf87dce.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 223KB - Virtual size: 4KB
Size: 228KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE