Static task
static1
Behavioral task
behavioral1
Sample
5c9dc7c3128b0bef376c471e62e982c0N.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
5c9dc7c3128b0bef376c471e62e982c0N.dll
Resource
win10v2004-20240802-en
General
-
Target
5c9dc7c3128b0bef376c471e62e982c0N.exe
-
Size
296KB
-
MD5
5c9dc7c3128b0bef376c471e62e982c0
-
SHA1
d683d0b8a3671460da69561b21ae37a6d25b764a
-
SHA256
2fb0901734c6143091fc8341066b445c3d448e106e32a5bd238f6b0d3068ca7b
-
SHA512
42edb2859530b9338920c7fb73eb444041e49bb8b68758b6788e36545fc7f25348c851d001b917b672bb36e81e02a1961cc99836ac8f7ee437a66c9024bb963d
-
SSDEEP
6144:s1i+xR1wKRTSdNLmf5q9sWhi8kv+2ef0npAz6ulOQbmRuX:s1R9wKRTS28KWhi8C+2ef0n2blOmym
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c9dc7c3128b0bef376c471e62e982c0N.exe
Files
-
5c9dc7c3128b0bef376c471e62e982c0N.exe.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.... Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.... Size: 251KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE