main
Static task
static1
Behavioral task
behavioral1
Sample
2fcc7cedbf4717347c357251b7465263d0c04143148693609eab761e7450931d.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fcc7cedbf4717347c357251b7465263d0c04143148693609eab761e7450931d.dll
Resource
win10v2004-20241007-en
General
-
Target
2fcc7cedbf4717347c357251b7465263d0c04143148693609eab761e7450931d
-
Size
37KB
-
MD5
89b9983119d2bffe091621a62c40870c
-
SHA1
3b8451c0c3c128d7cb91fb1a5f000a22e7b52d28
-
SHA256
2fcc7cedbf4717347c357251b7465263d0c04143148693609eab761e7450931d
-
SHA512
88653f52042fdb52119218cdf925290d93931937bd3fd6e78d0418566786096a7416008d07da1e4a08eecd76101736ca1adfd1432c523836ecab81a3cdc6989d
-
SSDEEP
768:dmSLXn5ZVVt9ZlA6ozJNpgAakNVnJulTYocBIkxtXnPZ5W:dfz/VVt94zJNfa4Tul8ocBRX2
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fcc7cedbf4717347c357251b7465263d0c04143148693609eab761e7450931d
Files
-
2fcc7cedbf4717347c357251b7465263d0c04143148693609eab761e7450931d.dll windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
tLzn Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tAvL Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QeVD Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE