Behavioral task
behavioral1
Sample
e8b0f11992fe7473668557530e93455424e18436e4678802cd4d3c34157ee8a9.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e8b0f11992fe7473668557530e93455424e18436e4678802cd4d3c34157ee8a9.dll
Resource
win10v2004-20240611-en
General
-
Target
e8b0f11992fe7473668557530e93455424e18436e4678802cd4d3c34157ee8a9
-
Size
14KB
-
MD5
4239b229a9d6de38fc59d78c6e35cd94
-
SHA1
ace2525c4d92d81df78ad9e092b7977aa7dea2c8
-
SHA256
e8b0f11992fe7473668557530e93455424e18436e4678802cd4d3c34157ee8a9
-
SHA512
d2aa6bc49c4fd30a26c47d528d4d0bb78330227b4e058e37e1afb11155e0d027f6a51dfcb2d99d2a13b12b5d39d40d7f9ee003396368a0ceaee7882121377517
-
SSDEEP
384:+o/pBtOJrXU/aYf5vo8Uiy5Ok66aNJawcudoD7UbW3Q4:j3UESYgcnbcuyD7Un4
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8b0f11992fe7473668557530e93455424e18436e4678802cd4d3c34157ee8a9
Files
-
e8b0f11992fe7473668557530e93455424e18436e4678802cd4d3c34157ee8a9.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE