utib
Behavioral task
behavioral1
Sample
2a07f809dd1a2ccb14dbe4905405d0ef31c2d6a550dd61d3252a4633347b1c31.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2a07f809dd1a2ccb14dbe4905405d0ef31c2d6a550dd61d3252a4633347b1c31.dll
Resource
win10v2004-20220812-en
General
-
Target
2a07f809dd1a2ccb14dbe4905405d0ef31c2d6a550dd61d3252a4633347b1c31
-
Size
10KB
-
MD5
762e402e78eedcb591cb97d2e0dc63ec
-
SHA1
43fed36b1e5a89572b19ba767b40d1d1be952ba6
-
SHA256
2a07f809dd1a2ccb14dbe4905405d0ef31c2d6a550dd61d3252a4633347b1c31
-
SHA512
612bf5f3c4f3b3592bab193195f4b3648e97340af73139499ef711855d0aa2c4199bd4f5eaa943ec10538add4bf224aba928c2b9b3a29475200e1e6d49daa4d0
-
SSDEEP
192:fZp7q4lTbynmtbw3MkOpaqR3IRa15NmNq8wiI1qrD6aAwwSWINW:fZNtlKnmGMbaq+Ru5NV8s1qrD6aAwTWz
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
2a07f809dd1a2ccb14dbe4905405d0ef31c2d6a550dd61d3252a4633347b1c31.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 369B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 886B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ