Static task
static1
Behavioral task
behavioral1
Sample
4884f6be9b766200deadc8ae5a6fb22d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4884f6be9b766200deadc8ae5a6fb22d.dll
Resource
win10v2004-20231215-en
General
-
Target
4884f6be9b766200deadc8ae5a6fb22d
-
Size
66KB
-
MD5
4884f6be9b766200deadc8ae5a6fb22d
-
SHA1
2ef62842b04892c0a7b4a7b36ce4802130d53d17
-
SHA256
c05f043f2c951381457582c356e2143c618ba2f7750d6c763ae586e1e658e24a
-
SHA512
0435e39ea0a45c5a1d909cf84255053a6699679ff0b8018eed9414b01ec27a2c7638a094aabaeb9c34568a4e1dae2d270e8e3e0d9e1196d89eee9e5c133bf2bd
-
SSDEEP
1536:fvuKH/ECWm2fz+5AEINgsdLA3byIQZbgCe7fUbdEyPeyr0:fGKH/Eh1z+6jNjpbgbDUzk
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4884f6be9b766200deadc8ae5a6fb22d
Files
-
4884f6be9b766200deadc8ae5a6fb22d.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 180KB - Virtual size: 4KB
Size: 188KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE