Behavioral task
behavioral1
Sample
eb2d5d6233561cd9c9f345ee6b904db036de20da16729344318b59cff3eec8bc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb2d5d6233561cd9c9f345ee6b904db036de20da16729344318b59cff3eec8bc.dll
Resource
win10v2004-20220812-en
General
-
Target
eb2d5d6233561cd9c9f345ee6b904db036de20da16729344318b59cff3eec8bc
-
Size
288KB
-
MD5
6fe44f80c5f8c85d904d18c0b32751d0
-
SHA1
6caa00282681ab2b8013823c677db44075c17fb4
-
SHA256
eb2d5d6233561cd9c9f345ee6b904db036de20da16729344318b59cff3eec8bc
-
SHA512
1b55ccf722d1fd22e734b0fe6b3cbcf6c61d3692a0e12fb29b56991e5c1f64d88a4eeaceccac4b7e2a20f38854980d2c86c4d5fcf9dd9e463d760d9489709bcd
-
SSDEEP
6144:mRApZ/yAErT2SkDaVwMBwXj+1F5EfzAR+9PAjAYTGLaxWEZQdG:mRALE/kuVwFTY5EfcMBufsEZp
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
eb2d5d6233561cd9c9f345ee6b904db036de20da16729344318b59cff3eec8bc.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 286KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 356KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ