zl
Static task
static1
Behavioral task
behavioral1
Sample
105ffa9bf1bd50c370323a47e5f58c2db9c81d43a474bfa66172335ea24750d6.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
105ffa9bf1bd50c370323a47e5f58c2db9c81d43a474bfa66172335ea24750d6.dll
Resource
win10v2004-20240802-en
General
-
Target
105ffa9bf1bd50c370323a47e5f58c2db9c81d43a474bfa66172335ea24750d6
-
Size
335KB
-
MD5
45fe6e301a845e4c25fa68956c0f7391
-
SHA1
380d5d445cd4879bfbcaa220fa12d25ef6e043e6
-
SHA256
105ffa9bf1bd50c370323a47e5f58c2db9c81d43a474bfa66172335ea24750d6
-
SHA512
304c9e06f09a383d89b26d824a9b848568b8673346176ecda7ccf547aada8279412c614e44f087b31970fcc0757180189e46cabf5ea52188d1eb385ec20a34b2
-
SSDEEP
6144:L0Xs1Az5NIjuThdBeFM+tZogqNUJcu+w4x5p4ji+s4Wx39chq:A2Az3IyThdBRcSgVi5p4Zsxu
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 105ffa9bf1bd50c370323a47e5f58c2db9c81d43a474bfa66172335ea24750d6
Files
-
105ffa9bf1bd50c370323a47e5f58c2db9c81d43a474bfa66172335ea24750d6.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
VMP0 Size: - Virtual size: 628KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VMP1 Size: 311KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE