AcRes[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AcRes.dll
Size

325KB
MD5

2e10e7d77700d67e6d9856a69420d5eb
SHA1

a741fc8e5a83d681c001aadf1a58aa2024d581ee
SHA256

c7830621bf03d751e0cee3b7751e959d5934d8513043b556d4c5f914f0a5636b
SHA512

6eda54b0e0330a2f91c9c69ed7ac05540040e2f9d69211ec77c319cc6978a8a27c41eee6d0195ce74f8fded5f6c897db3af461bd025025745abbe7e2f8b7df82
SSDEEP

3072:rDW/mc1wub7Yx7WcMvZlW6SHGePnpTNyj9eM1dMxOrUiiyAX0xuynn:M1T73jGCAen0in

Score

1^/10

Malware Config

Signatures

Files

AcRes.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:04:13:31:bc:19:88:07:a9:07:74:00:00:00:00:04:13
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/02/2023, 00:05

Not After

01/02/2024, 00:05

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

94:15:71:99:36:28:5f:57:1e:31:99:a0:7d:1c:64:a2:0e:c2:ce:48:4f:4d:3d:78:e8:ca:c9:f1:f7:be:c5:7b
Signer

Actual PE Digest

94:15:71:99:36:28:5f:57:1e:31:99:a0:7d:1c:64:a2:0e:c2:ce:48:4f:4d:3d:78:e8:ca:c9:f1:f7:be:c5:7b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:04:13:31:bc:19:88:07:a9:07:74:00:00:00:00:04:13Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

94:15:71:99:36:28:5f:57:1e:31:99:a0:7d:1c:64:a2:0e:c2:ce:48:4f:4d:3d:78:e8:ca:c9:f1:f7:be:c5:7bSigner

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 512B - Virtual size: 208B

.rsrc Size: 315KB - Virtual size: 315KB

33:00:00:04:13:31:bc:19:88:07:a9:07:74:00:00:00:00:04:13
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

94:15:71:99:36:28:5f:57:1e:31:99:a0:7d:1c:64:a2:0e:c2:ce:48:4f:4d:3d:78:e8:ca:c9:f1:f7:be:c5:7b
Signer

.rdata
Size: 512B - Virtual size: 208B

.rsrc
Size: 315KB - Virtual size: 315KB