F1122
Behavioral task
behavioral1
Sample
ac37f423f144c75944085879747b018e.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac37f423f144c75944085879747b018e.dll
Resource
win10v2004-20240226-en
General
-
Target
ac37f423f144c75944085879747b018e
-
Size
205KB
-
MD5
ac37f423f144c75944085879747b018e
-
SHA1
605e32918072d9c10effc1dbcf64725c414023ee
-
SHA256
ae80ecc0601c8f518cb6026cb36a5b2eb4010c2e2ab4b5622e5ae8d376b7a17c
-
SHA512
e1cb4f3582bace7ee7e9618a1a26f6fc7898ab30b8ab0d27f95be78e5137cc353bc3f4b3168c2e2291f081eca914c974d2909382c340d95aa59ceae3d396b0ff
-
SSDEEP
3072:A/5W9TzJO1hMeH0MBfrZPVzBvSU4WjD3gPK0FVoDys2sK7Wvai8gTsEyAJ/noutS:A/68JUef5vFQPh+y5uf8gHyufoS7
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac37f423f144c75944085879747b018e
Files
-
ac37f423f144c75944085879747b018e.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE