_@0
Behavioral task
behavioral1
Sample
1aaee63ab6a07d55ac8e5515d069fdfe3d9bd7f63bff4960f06de8021931eb90.dll
Resource
win7-20240708-en
General
-
Target
1aaee63ab6a07d55ac8e5515d069fdfe3d9bd7f63bff4960f06de8021931eb90
-
Size
1.5MB
-
MD5
e9c5cff87bd936d0c6e7e263e7487374
-
SHA1
f4b8aaa762487b10555e59b5c1e337ec810d823d
-
SHA256
1aaee63ab6a07d55ac8e5515d069fdfe3d9bd7f63bff4960f06de8021931eb90
-
SHA512
8140737c24cbcdc7af6afe330508f0166a12838c1e9a8b0c5db46cb2fceb6060c0a8ad15d16a3fc6be5ba5659dbc6f82e88da2f4004dae0b3564ebaa80e869e0
-
SSDEEP
24576:95XgwJmP4+D/oq+s8XPcsdhNtJ+IywDpFEMj27jYKY6f1krrTdk93nVoHrRi:3RsQ+DAqk/ntJ+IRNFEP7716idnVoLR
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aaee63ab6a07d55ac8e5515d069fdfe3d9bd7f63bff4960f06de8021931eb90
Files
-
1aaee63ab6a07d55ac8e5515d069fdfe3d9bd7f63bff4960f06de8021931eb90.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE