������Ϣ
Behavioral task
behavioral1
Sample
a49cdd745f3d512e828a042d9d5d201481dc5777b0f3b8fce06895b4fa525e45.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a49cdd745f3d512e828a042d9d5d201481dc5777b0f3b8fce06895b4fa525e45.dll
Resource
win10v2004-20240508-en
General
-
Target
a49cdd745f3d512e828a042d9d5d201481dc5777b0f3b8fce06895b4fa525e45
-
Size
120KB
-
MD5
f5a084db8b89c4886f99417737e9c360
-
SHA1
02b4e83fdb15c2cb7ab3720c5cbd8b4626485d40
-
SHA256
a49cdd745f3d512e828a042d9d5d201481dc5777b0f3b8fce06895b4fa525e45
-
SHA512
b7c8b1817f80014d9911062baaf64adfff6ae711fac10d1cccec8b9501b3bf486e11c4876de51c6330ac8780e62274b8afecf4b35e8ffaa86d5439dbe5101883
-
SSDEEP
3072:eY54gh5+d8oxDsGFa2UC/GQlEj/97OK32jk2VhJmzsqout1:eY5Dh5+d8oxD9abQlEj/97OKm3fmzBoS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a49cdd745f3d512e828a042d9d5d201481dc5777b0f3b8fce06895b4fa525e45
Files
-
a49cdd745f3d512e828a042d9d5d201481dc5777b0f3b8fce06895b4fa525e45.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SIGN Size: 512B - Virtual size: 16B