Static task
static1
Behavioral task
behavioral1
Sample
7b6ee7a38023e744de4858df20b8dbdb.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b6ee7a38023e744de4858df20b8dbdb.dll
Resource
win10v2004-20231215-en
General
-
Target
7b6ee7a38023e744de4858df20b8dbdb
-
Size
57KB
-
MD5
7b6ee7a38023e744de4858df20b8dbdb
-
SHA1
b55c71578286a3b0ee99fcd7d777052f60780193
-
SHA256
b68974d9be0ae2b800aca66d3fd1129791369da84893f0ec1bd5b3811423e985
-
SHA512
3d2889897742d75ccc501a74fb59590cf0d86d6f91257f077d5df432bc4b24a8a9ebf81dbd10bd1a9dad78326546a1a2a8d2086ad1837bf338c68385828ceb56
-
SSDEEP
768:3dyIBk6R7DEw4Sj33mhYDRFxUnEGUbHhnhIPc5oB2Spgo4BmjH7GQ83ZZxoM8WEf:8/+P4a2WHSUhnB5T+/SQoaWEUasA
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b6ee7a38023e744de4858df20b8dbdb
Files
-
7b6ee7a38023e744de4858df20b8dbdb.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 166KB - Virtual size: 4KB
Size: 172KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA