ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
c66ffbb3f3688a454563ef32a0a36b86.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c66ffbb3f3688a454563ef32a0a36b86.dll
Resource
win10v2004-20240226-en
General
-
Target
c66ffbb3f3688a454563ef32a0a36b86
-
Size
229KB
-
MD5
c66ffbb3f3688a454563ef32a0a36b86
-
SHA1
9ff6ff5569d04c68d2d82993df72aa9e31c16d34
-
SHA256
9bd76f6e1d7b0805c7a013133b7d8bc590a8152413b37b0d66f4cec06f150087
-
SHA512
a470d003506b333f9ac12808176c80676e41801030b99748bc83e0142426cd322f696623ecc04cfec9960e4330503d97d815375120ab78b0c93dbde0571d2ab3
-
SSDEEP
6144:XU0T90GuyIyeZq0Aou/fQ20GhCwghLBEg7CwIn7agv:5FuCeZq0dKfR0oCwILna7aM
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c66ffbb3f3688a454563ef32a0a36b86
Files
-
c66ffbb3f3688a454563ef32a0a36b86.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.packed Size: - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE