Static task
static1
Behavioral task
behavioral1
Sample
cb8970d9af9700deb8834731fa23f001.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb8970d9af9700deb8834731fa23f001.dll
Resource
win10v2004-20240226-en
General
-
Target
cb8970d9af9700deb8834731fa23f001
-
Size
14KB
-
MD5
cb8970d9af9700deb8834731fa23f001
-
SHA1
ee72e12df49db56263d30db5547f6288b3219ad6
-
SHA256
d00b3025aa8d1914c252a88b60c904f0661fc2006ad8910a31288fea771cbf41
-
SHA512
5fe8331e01a7c44259173e3768166f05fb3a94e794bb8401d15e3bce22bc37a5f5313499c16557448cec4e0cef68234ee3950ae04fc1013cbd771fa298223e64
-
SSDEEP
384:BSyH2+yxMNl3EQTqe65n7dNjy9Hv1O3qv99W:YyH2txMbVqe8/+VvjW
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb8970d9af9700deb8834731fa23f001
Files
-
cb8970d9af9700deb8834731fa23f001.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE