ERU03Sbfex
Static task
static1
Behavioral task
behavioral1
Sample
525d761a1ff8fc6c678ac839cbd89c27.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
525d761a1ff8fc6c678ac839cbd89c27.dll
Resource
win10v2004-20231215-en
General
-
Target
525d761a1ff8fc6c678ac839cbd89c27
-
Size
37KB
-
MD5
525d761a1ff8fc6c678ac839cbd89c27
-
SHA1
0fd844508c13aa821e74e2bcb56f3dc484ed9690
-
SHA256
9319e0b19ae29b5e13934cbdffacb3cc85d02ef3c0b127571efb43d7a3c63423
-
SHA512
db5661b8851de37b2bc22364a451198dcef447d2c18e44f1704e38b0368fec9cd5c6b616a30951cb56de130f0e6294223baa76ba74598aeb0b365395b5d5c47b
-
SSDEEP
768:WB6SCJTmAjk6jPKZJxSwyeMWkO9GG5Kg4JKHv46yRH+r:VTHYIPwceMWkDG0JKHEJw
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 525d761a1ff8fc6c678ac839cbd89c27
Files
-
525d761a1ff8fc6c678ac839cbd89c27.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE