RunDllHostCallBack
Behavioral task
behavioral1
Sample
33b90db8f64896481f92104a6beddbab2a96e375c22337115a5251aaff85209d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33b90db8f64896481f92104a6beddbab2a96e375c22337115a5251aaff85209d.dll
Resource
win10v2004-20220901-en
General
-
Target
33b90db8f64896481f92104a6beddbab2a96e375c22337115a5251aaff85209d
-
Size
69KB
-
MD5
9cea5b41284d734c41192a08df9afeaa
-
SHA1
340b1e8f24e544f2c3076e7ff43cb4ed0a499386
-
SHA256
33b90db8f64896481f92104a6beddbab2a96e375c22337115a5251aaff85209d
-
SHA512
08876c072ea1c770216c08cf20d0b867297dbf018c98001ab021d7d5c039daae2f93439bb34b1b766565e918012d3bd98b218cbf544dd81921541ff21bb7e87c
-
SSDEEP
1536:whUzixwoJqFh4Xpg+W1NqH3rBI975X0fpw4wJmOBHr0AnZS:2U6pJdpg32H3ru99EfSUOBHnZS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
33b90db8f64896481f92104a6beddbab2a96e375c22337115a5251aaff85209d.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tldksods Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ