DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
b97aac979db665d05be6b6b1248e88fe.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b97aac979db665d05be6b6b1248e88fe.dll
Resource
win10v2004-20240226-en
General
-
Target
b97aac979db665d05be6b6b1248e88fe
-
Size
7KB
-
MD5
b97aac979db665d05be6b6b1248e88fe
-
SHA1
468d2dfc7a03d4f7f41db00191f398bed8a33a97
-
SHA256
438a3604c509d85b35909bd0541cd05063da05d64ffdebaf5ccc8f62ff5162eb
-
SHA512
e6347d233501fc9d8c38276ee2b75f87dc67340594afbd19bfe2374f52be7dfac1962cf6482793329b5fd6a05c255869d06bb569b9a536a9595d5332e2835868
-
SSDEEP
192:n9dLq4xi4qENhEuAeCNFU1SQgNT84+tI:9dLpxhEy512TK
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b97aac979db665d05be6b6b1248e88fe
Files
-
b97aac979db665d05be6b6b1248e88fe.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE