DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
52c774becf2c514f51d66fd183dd9ba2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52c774becf2c514f51d66fd183dd9ba2.dll
Resource
win10v2004-20231222-en
General
-
Target
52c774becf2c514f51d66fd183dd9ba2
-
Size
7KB
-
MD5
52c774becf2c514f51d66fd183dd9ba2
-
SHA1
7c9f42126751c7597ecb5364ebe4d5a90ea88b66
-
SHA256
a777d0eb11cfae521d1c22913bcd975e561a4fbbae8f7d9feca18f58c02ae679
-
SHA512
ed91d775d761d2f1418ddf48c6ac7a967386ac821d054a9b210e2fcc799fd94187942907224b2374c66b9ad707aefae830a4b474eadcac574b18fe9f2258e004
-
SSDEEP
96:nPLo+76QAB3Efihl/wA9QWGhLQUI4XxPvbkhA7IDZUb8tTMP345QT3BL5aQt:ndkoWQXhpPHPItT84+tI
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52c774becf2c514f51d66fd183dd9ba2
Files
-
52c774becf2c514f51d66fd183dd9ba2.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE