F1122
Behavioral task
behavioral1
Sample
53fe8fc84580a3ce0f3afaa7bb599c0b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
53fe8fc84580a3ce0f3afaa7bb599c0b.dll
Resource
win10v2004-20231222-en
General
-
Target
53fe8fc84580a3ce0f3afaa7bb599c0b
-
Size
155KB
-
MD5
53fe8fc84580a3ce0f3afaa7bb599c0b
-
SHA1
6c8eaee173df3ef510a9f26894eaa9fb97e4925f
-
SHA256
384f0f2ed1b7d5ea95b6f391ec44b8021fa1c715c63048106ee080877836ee9a
-
SHA512
bfb8d21c021639f97cc62d6b6c107c13d06f3bf761ff446221076561a58141c252432dac09a783ebaefd9c007e589c2567b55e1cf1f60e864ec55b70a97d7f6a
-
SSDEEP
3072:q2kaaDSIJsDbxfv+I05aON2GcnbLyPFlJVoutJAT1:qXaaWIJsXxfv+I9OHcnnKoS2
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53fe8fc84580a3ce0f3afaa7bb599c0b
Files
-
53fe8fc84580a3ce0f3afaa7bb599c0b.dll windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE