Static task
static1
Behavioral task
behavioral1
Sample
52eeac8210124fa4c090334c0fb9abd9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52eeac8210124fa4c090334c0fb9abd9.dll
Resource
win10v2004-20231222-en
General
-
Target
52eeac8210124fa4c090334c0fb9abd9
-
Size
24KB
-
MD5
52eeac8210124fa4c090334c0fb9abd9
-
SHA1
7304d881c10d39bcb48c0f673b89afc5293a2faf
-
SHA256
7a45425d405b7383c2a9141600e4909f80f481c48431698cc0e796fe67085a4c
-
SHA512
1bb12de46f24ccbc5b3f55a58de9fb4c501d7aee50620bf878b467810235e2e924d121221e108b27b24485e21ead48664204ac5e9bc5c4c6b6fc66afce2e3134
-
SSDEEP
768:J21pTNlFdApLpsiVxgDdkfcyqJumUWPsYX:olNHdApTxMdkSumUWPsY
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52eeac8210124fa4c090334c0fb9abd9
Files
-
52eeac8210124fa4c090334c0fb9abd9.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.packed Size: - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE