459807ac2b263366c9779910c0639c5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

459807ac2b263366c9779910c0639c5f
Size

40KB
MD5

459807ac2b263366c9779910c0639c5f
SHA1

23f88a2a1eec91dec6e9628c2bcf4bc09a4d7343
SHA256

b054519ab5bc517bad6f6de75366b26d1c4b2b4d8d045e55bf681c9cf18bde39
SHA512

c956cfbbe4bfb3c0c4ce55edf8ab5c45208d3eef0ecbbe87ad4592664ac669a3726fab5872c84b1dcc684a73d14d70da4b5f37dcd859266346289a1bc55f5dae
SSDEEP

768:Nd4a3vOtFMYS+Yt182jZukgnTxIeGMXlMN9XowwZXQUIsn:Ma/MMYS+YX87nTWelaN9XowWXQo

Score

7^/10

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
459807ac2b263366c9779910c0639c5f

Files

459807ac2b263366c9779910c0639c5f
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Install
TsVersion
Uninstall

Sections

.text
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE