DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
25c4886cdab26aa6ef21be6dd64514f5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25c4886cdab26aa6ef21be6dd64514f5.dll
Resource
win10v2004-20231222-en
General
-
Target
25c4886cdab26aa6ef21be6dd64514f5
-
Size
7KB
-
MD5
25c4886cdab26aa6ef21be6dd64514f5
-
SHA1
281bf2434aea81825b5a572aa2e3588cac8721a8
-
SHA256
6993567794626e2ba45498b7f507c3686e99c19de7996ca4e9349ae7a083054f
-
SHA512
ed046bb21c8b5e6c48ae61932a8912232e8be4b4465035b5a1838700952b631195ae57ed8e6cecbe178c71da92cb1237b5f0f9febd18ccc3069c6b1306c23427
-
SSDEEP
96:nPoxNeVYCbF5tDqC2pXYOR+kc30+ZVj0qy/mU8jTMP345QT3BL5aQt:nWNeeCpbDqHpoe+kck+Zp1JjT84+tI
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25c4886cdab26aa6ef21be6dd64514f5
Files
-
25c4886cdab26aa6ef21be6dd64514f5.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE