Behavioral task
behavioral1
Sample
c16afa37ac8b4be5a9ce6cd7382885f4.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c16afa37ac8b4be5a9ce6cd7382885f4.dll
Resource
win10v2004-20240226-en
General
-
Target
c16afa37ac8b4be5a9ce6cd7382885f4
-
Size
30KB
-
MD5
c16afa37ac8b4be5a9ce6cd7382885f4
-
SHA1
cf09f8269a0a2e6b6d6f4395d6c92495b6b8489e
-
SHA256
c795bda0815498a2e19184033f5a5ea8671831dabb344f82515e377866af0ab5
-
SHA512
471b3b0d6bd7a1b8c0af0e80f9652dc40a9b268c8057e86f3eaebd22eb150444fda80463924b1c97b473d0da889f75c11df49d1b085b9b40bb5b4f6ca8266c21
-
SSDEEP
384:dcy3Vpg+7iZnEYIhrQMYkhddFAQ3LaVEA6R2rl5/JaOhE1iwW46ofY4nXkkawrQ/:VT77h2KFv3uVEA6Irl5/jHz4PLPawMS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c16afa37ac8b4be5a9ce6cd7382885f4
Files
-
c16afa37ac8b4be5a9ce6cd7382885f4.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE