Behavioral task
behavioral1
Sample
523dba8942493519232ecf84822392ac.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
523dba8942493519232ecf84822392ac.dll
Resource
win10v2004-20231215-en
General
-
Target
523dba8942493519232ecf84822392ac
-
Size
84KB
-
MD5
523dba8942493519232ecf84822392ac
-
SHA1
c06c60ff2d57bfb450bffc517e197b42ccd7d855
-
SHA256
70df85674140b87e4d865ed49972f5c1bfc897ada5f39ac7a863f4f67b7ae331
-
SHA512
8a7a2336483828742e22d2732dfdd982ff803c34229e3145379ff57e1a8ad0a8fb5908f03ad4a432e7e5c233a26566cfb6d973f6ba5cc8cec59dd288e49dbd5b
-
SSDEEP
1536:cG5UZSCmOF1j0VMJjRqYh6W/kO1A+Gx9HRGt2v2fcu/qW57ZIMAulvkzpHe+x:9qZSqjj9r6W/xLGxnU2vLW5tIMA5ptx
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 523dba8942493519232ecf84822392ac
Files
-
523dba8942493519232ecf84822392ac.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 233KB - Virtual size: 4KB
Size: 240KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE