01d87465e420bea58a885614ea64b9b5a0f6b691046970c6b77cb0c3f9332187 | Triage

Sharing

General

Target

01d87465e420bea58a885614ea64b9b5a0f6b691046970c6b77cb0c3f9332187
Size

171KB
MD5

4862b3a9a5b2311dbe73e9b459be5763
SHA1

d7c3c901ea5444ad70067dfc0508bcd0af61a6ac
SHA256

01d87465e420bea58a885614ea64b9b5a0f6b691046970c6b77cb0c3f9332187
SHA512

22750451555c83dc5ce592e0f2edcc0a603cd65ed2aba9bc29ba6bb34ba7ea98ef27770c27df4f6fc62d20818ec968365f70fa695b7d2cfc79859bc017c32062
SSDEEP

3072:ynEBDT0HwGr9nFhlELfpwFTePtKlO/FKEYkGVfN1uPEpeZP+b1JME2s9Qr+zSv3/:yI6wG5n5E1OSV/tG5a+b1/T9M+2v3M

Score

9^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

01d87465e420bea58a885614ea64b9b5a0f6b691046970c6b77cb0c3f9332187
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

EEobZrALtw
UaIgDmK
XjNrxLP
ZCcmnLsun
mbQhXHfCh

Sections

UPX0
Size: - Virtual size: 356KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 370KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ