Behavioral task
behavioral1
Sample
c206740bb3c06d2b78d4ae508f5ef125f1792920108e431723780b33794ffd8eN.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c206740bb3c06d2b78d4ae508f5ef125f1792920108e431723780b33794ffd8eN.dll
Resource
win10v2004-20240802-en
General
-
Target
c206740bb3c06d2b78d4ae508f5ef125f1792920108e431723780b33794ffd8eN.exe
-
Size
83KB
-
MD5
4b5aba788ad1046afb1450b109c62270
-
SHA1
85e2faa12dc46518878128317bd6b94e6ff21f33
-
SHA256
c206740bb3c06d2b78d4ae508f5ef125f1792920108e431723780b33794ffd8e
-
SHA512
852a7b06a8111d36597cd918eb6a6d1b74669091d7aa9f765bdbf8d846d1a5bc2c9b87b94cbf7bca5c3092c2c10921a00434334af569beed4b42f1996184e59f
-
SSDEEP
768:VPX5fDVj2uFxtlTOQhMzt70HjxvSSyAXlCRaOHlk+XVcVFzvyVql6jurO2d:BXVjFVR6NlbfkicDv4qEu62
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c206740bb3c06d2b78d4ae508f5ef125f1792920108e431723780b33794ffd8eN.exe
Files
-
c206740bb3c06d2b78d4ae508f5ef125f1792920108e431723780b33794ffd8eN.exe.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE