yxal
Behavioral task
behavioral1
Sample
7153242fd229aa11ce06cdfe4be30fd8eb8270babb1fb98d0a963bbde39df9d6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7153242fd229aa11ce06cdfe4be30fd8eb8270babb1fb98d0a963bbde39df9d6.dll
Resource
win10v2004-20220812-en
General
-
Target
7153242fd229aa11ce06cdfe4be30fd8eb8270babb1fb98d0a963bbde39df9d6
-
Size
12KB
-
MD5
376ce3381a968b20105d1ff410896a62
-
SHA1
7de24c012b15d278368fa31591b0d7dd786eb960
-
SHA256
7153242fd229aa11ce06cdfe4be30fd8eb8270babb1fb98d0a963bbde39df9d6
-
SHA512
ef3ee35e9648db006b202e2411113393fa16ae066a745fbdf69e4bc591c1a0c763c8156e043c87cf018207c9ba0cd9a0487d99c6d5a9e475a3c005c8b34a8776
-
SSDEEP
192:bqzdFfXVi61Zluw02RRjRBpSHkGS9eEe+Rsa2F7OZVvww4ayNZxmBoUM7vWi8W:bqzdVXxlu32fjwHkGS9eN6sa2pOQw4ai
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
7153242fd229aa11ce06cdfe4be30fd8eb8270babb1fb98d0a963bbde39df9d6.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 273B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ