s
Behavioral task
behavioral1
Sample
1d303a1bf22e1336827561c7e709ebb896dbccd20bea44254ab777a63ca57fdb.dll
Resource
win7-20240708-en
General
-
Target
1d303a1bf22e1336827561c7e709ebb896dbccd20bea44254ab777a63ca57fdb
-
Size
3.8MB
-
MD5
9f50a1281c1cbc657ed87a931530fc52
-
SHA1
0dcd2291a89375163d4bc2fe1cef2a70e47db368
-
SHA256
1d303a1bf22e1336827561c7e709ebb896dbccd20bea44254ab777a63ca57fdb
-
SHA512
dee81c56a470351aacdbd7e907e95ff14deff90eddbfce988dc0dd476d294ca608bdcb08b141bdd3c9f9693d6231efc9a7e85d11b8537d77c23d16668e24a153
-
SSDEEP
98304:9eMpClgqia1541P/7ZugnOHsbhoDeBxjab+otLRp:GgqiaQ1373OHsb8eOb+O
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d303a1bf22e1336827561c7e709ebb896dbccd20bea44254ab777a63ca57fdb
Files
-
1d303a1bf22e1336827561c7e709ebb896dbccd20bea44254ab777a63ca57fdb.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE