DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
0e420532e07c42318bcd703107dc4dd1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e420532e07c42318bcd703107dc4dd1.dll
Resource
win10v2004-20231215-en
General
-
Target
0e420532e07c42318bcd703107dc4dd1
-
Size
7KB
-
MD5
0e420532e07c42318bcd703107dc4dd1
-
SHA1
1ebceb9f9581884e1b4b60ac05f78cd26089b0b1
-
SHA256
6c47ad428e238fdee7ba7d073eeb1bf712df312d576eb33cd9adbc647a2b686f
-
SHA512
377c2852d41c0304fd423948e806cd68241c6567b5d1f2755fb31638bd23ddc019ecd75015c2f14811e499a8059be84c6abdc34310b68fef544f27090db6e605
-
SSDEEP
96:nPV0rSBn7qvQN+PYzsuDEoYSN8yHzVmpIu98zTMP345QT3BL5aQt:naO2QSY9nN8yTgIuyzT84+tI
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e420532e07c42318bcd703107dc4dd1
Files
-
0e420532e07c42318bcd703107dc4dd1.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE