Behavioral task
behavioral1
Sample
7def91f7c9cf523c59bf540b5ba419ab.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7def91f7c9cf523c59bf540b5ba419ab.dll
Resource
win10v2004-20231215-en
General
-
Target
7def91f7c9cf523c59bf540b5ba419ab
-
Size
218KB
-
MD5
7def91f7c9cf523c59bf540b5ba419ab
-
SHA1
a2d0cefbe023e9a2fdd5775bd73393336ea03817
-
SHA256
f96f7f7c46580e529964d525729d843112582c88b91d84cab8568f556fbef83c
-
SHA512
f15b8f296f2104d1afe9431ec5297cc4e9ac6d3a42e98deb2d007bcea4f9cd8ffbd3eebe8c8343fcb93610f4b5985ffa09d9aa68e322c3d9b861d54ee6187dc7
-
SSDEEP
6144:kViMZpVOj2FMbzOfeIkZI8ntr0+f9c1V3R9:kVzpVpFUOlY5tr0S9E3r
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7def91f7c9cf523c59bf540b5ba419ab
Files
-
7def91f7c9cf523c59bf540b5ba419ab.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 580KB - Virtual size: 4KB
Size: 588KB - Virtual size: 4B
���� Size: 587KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA