ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
185a04bc0948a1b6dabd2d59eefb15fb.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
185a04bc0948a1b6dabd2d59eefb15fb.dll
Resource
win10v2004-20231222-en
General
-
Target
185a04bc0948a1b6dabd2d59eefb15fb
-
Size
64KB
-
MD5
185a04bc0948a1b6dabd2d59eefb15fb
-
SHA1
d9ecc04e8b3d25cc31b0d4f25499b694b10c849a
-
SHA256
2f50f8856ce11cd2282b9f13b8de115729b5b68d4bd62be73be203e483203e96
-
SHA512
0b6975747bf06da77f872c97d50dfc68a82183c28d8af5390242b243a37f02c4b54e9575de9dcbac2907e0e1e708cf5bbc71f5b0cf8f78adb0f67e8d4943d84e
-
SSDEEP
1536:r7JlBse2qyrPNQrA6f5JItIlD5K9raX5bjJ:r7J8e2xrPy5JuIFs9Ub9
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 185a04bc0948a1b6dabd2d59eefb15fb
Files
-
185a04bc0948a1b6dabd2d59eefb15fb.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.packed Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 62KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE