Behavioral task
behavioral1
Sample
52e75fcd6fda0abae0f785c9a652f432.dll
Resource
win7-20231215-en
General
-
Target
52e75fcd6fda0abae0f785c9a652f432
-
Size
147KB
-
MD5
52e75fcd6fda0abae0f785c9a652f432
-
SHA1
1df972c33dd07cd36ac5b3dcfe87336349a0ee78
-
SHA256
23b7d8e2623e7af294476d404559214ecad2f99de4f2b5b4dcf96d8926c7ea45
-
SHA512
159100d3bcf38c83de59bc75d5e5f9c2b4029247bc890b0b5bc9692ecff8b401f99be872dff6ab0dd2acd0f4362e2c27681f36c1eb8ea0c624df26d9a6a97009
-
SSDEEP
3072:iVoWnCo0fx2RNsfscJRjwjN0giT+PzbY7JjMujbaVYJ6:iVoWn30o3DaVKN0giT+LE7JYucb
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52e75fcd6fda0abae0f785c9a652f432
Files
-
52e75fcd6fda0abae0f785c9a652f432.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE