ilib
Behavioral task
behavioral1
Sample
cb619173380c051243dad2f2fe932500551ea7269592d3055032e2b9ea1ae1d4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb619173380c051243dad2f2fe932500551ea7269592d3055032e2b9ea1ae1d4.dll
Resource
win10v2004-20220901-en
General
-
Target
cb619173380c051243dad2f2fe932500551ea7269592d3055032e2b9ea1ae1d4
-
Size
8KB
-
MD5
993be354afb42b9743854918df37c246
-
SHA1
1485b42ab24b513b083a6c52eed9418eef2ca6ce
-
SHA256
cb619173380c051243dad2f2fe932500551ea7269592d3055032e2b9ea1ae1d4
-
SHA512
2bfad62cf5b1d856284dee42df6994f0209e30cf5015eeceb87b395e5fe23c5a6aa6b1908f1a1df618f2ed80550efc17649a5e466b9286e47bc65acdc73feddd
-
SSDEEP
192:MGDyOXZosV25cAkINWzRzhuYXAQk1ABXSh6W9Wk:MuJb26AARzwiAQk1ANSAW9Wk
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
cb619173380c051243dad2f2fe932500551ea7269592d3055032e2b9ea1ae1d4.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 438B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 846B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ