Bit_CheckSerialNum
Static task
static1
Behavioral task
behavioral1
Sample
8239acfbd3e8b26d8c9e07513a71a6cbb2e8359bf7c215080fb9de7db00f404a.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8239acfbd3e8b26d8c9e07513a71a6cbb2e8359bf7c215080fb9de7db00f404a.dll
Resource
win10v2004-20240709-en
General
-
Target
8239acfbd3e8b26d8c9e07513a71a6cbb2e8359bf7c215080fb9de7db00f404a
-
Size
400KB
-
MD5
ec0484636990ba10181f80c28546ab5d
-
SHA1
29ba5369d4f1691c1a97593cbd047da5e4319a52
-
SHA256
8239acfbd3e8b26d8c9e07513a71a6cbb2e8359bf7c215080fb9de7db00f404a
-
SHA512
ef6190e4037ec9e9126fc042f297f15e0c6734e2a0598e5c2710242105227e9b7f7414b345cbf73640800ab16edca4fce2554af0ae59c4db7ce33363e1cf3d11
-
SSDEEP
6144:rEpG22lnxfJCnJ0SgqeQCnWh7d8ga1yXSDBhMa900EEi+8UPTGQEVYG6Y:rEo2IyTFxh7W71hMg00Ez9Qaw
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8239acfbd3e8b26d8c9e07513a71a6cbb2e8359bf7c215080fb9de7db00f404a
Files
-
8239acfbd3e8b26d8c9e07513a71a6cbb2e8359bf7c215080fb9de7db00f404a.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
B110 Size: - Virtual size: 584KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BLL1 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE