Static task
static1
Behavioral task
behavioral1
Sample
7e355e7d13deab4dd689ff864f4ac123.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e355e7d13deab4dd689ff864f4ac123.dll
Resource
win10v2004-20231215-en
General
-
Target
7e355e7d13deab4dd689ff864f4ac123
-
Size
7KB
-
MD5
7e355e7d13deab4dd689ff864f4ac123
-
SHA1
e171bd849acebef0505031491e656022531d6b19
-
SHA256
44717760873f0cddc105539e3d0ffc51fa5567bba3addcd5c697c6b37aff09e4
-
SHA512
e1b06295b758e40a2fa423a94c17b642d6cab7797e7eb8ba6a3be16fd16162cc4a2c928d3d2aeb071cd3b108bb53c48c9af65c5625bac28346fbf68aa9688db3
-
SSDEEP
192:S78wFk0f1bJSsF8U/kLkTacLJGRY0SmCz+bXergiOv:2jFrVikkITausXeK
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e355e7d13deab4dd689ff864f4ac123
Files
-
7e355e7d13deab4dd689ff864f4ac123.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.packed Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE