Static task
static1
Behavioral task
behavioral1
Sample
43e8bcbc3eecc6795f2594a5a1c3f76d0a6ecec97c3ef298f3a00d464d8231d0.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
43e8bcbc3eecc6795f2594a5a1c3f76d0a6ecec97c3ef298f3a00d464d8231d0.dll
Resource
win10v2004-20240426-en
General
-
Target
43e8bcbc3eecc6795f2594a5a1c3f76d0a6ecec97c3ef298f3a00d464d8231d0
-
Size
2.5MB
-
MD5
719cb5ad4617b5a061e29f407f870ef3
-
SHA1
b734a6fd94c15a88b1b3e8a75f9b123362aa02de
-
SHA256
43e8bcbc3eecc6795f2594a5a1c3f76d0a6ecec97c3ef298f3a00d464d8231d0
-
SHA512
129d034315b6b67653a3b1080e92e668dd80e6fa617fd81f20b6f8becbe00af124c20497bfb0ae0c3e38d5d724f359df82d24473198807c71f415456cdf76380
-
SSDEEP
49152:ccrHfonh7l2Asb+UDiffcwXUT+3hUo/n6lTNBNph9ZCzFEZm+u:cc8H2aHcwM+uAn6lNBxdZm
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43e8bcbc3eecc6795f2594a5a1c3f76d0a6ecec97c3ef298f3a00d464d8231d0
Files
-
43e8bcbc3eecc6795f2594a5a1c3f76d0a6ecec97c3ef298f3a00d464d8231d0.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
6X5f Size: - Virtual size: 700KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JMQU Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE