Behavioral task
behavioral1
Sample
d5cfe155db4b01e1a48af78b06a7eeff.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d5cfe155db4b01e1a48af78b06a7eeff.dll
Resource
win10v2004-20240226-en
General
-
Target
d5cfe155db4b01e1a48af78b06a7eeff
-
Size
84KB
-
MD5
d5cfe155db4b01e1a48af78b06a7eeff
-
SHA1
2dc27113409e50935da0c467646bf62801f83b9d
-
SHA256
f94fc317bbe7ee26b5fd1a098c18defbe69767a266a9a6b29d72419d768e5545
-
SHA512
d42bb122359edb7e6ee965c7affb539d7cd54b88daff79a556f7e1930d673f57444b25fec1849a2f7f16c3b5ed135dcde8634a0d52f3d86bfd54b92958d4580f
-
SSDEEP
1536:02Orfv38ghrdW3YGt6rqk0XnPVaYv6xZpynUr2QU2fHf80JbeuLvbnouy8S:0F8Qy3thnP4g+pyIpU2DJbfLboutS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5cfe155db4b01e1a48af78b06a7eeff
Files
-
d5cfe155db4b01e1a48af78b06a7eeff.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE