Behavioral task
behavioral1
Sample
db890c64fcf087ee7c757e70a1071f4ccab6c6f6114b3b2afac104f3bf7fa9f1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db890c64fcf087ee7c757e70a1071f4ccab6c6f6114b3b2afac104f3bf7fa9f1.dll
Resource
win10v2004-20220812-en
General
-
Target
db890c64fcf087ee7c757e70a1071f4ccab6c6f6114b3b2afac104f3bf7fa9f1
-
Size
98KB
-
MD5
7223aaafaa64066bc0a9d2c95aa73d90
-
SHA1
ac6f7f6ffba6b09c1d896d456bdb87f460fa06e0
-
SHA256
db890c64fcf087ee7c757e70a1071f4ccab6c6f6114b3b2afac104f3bf7fa9f1
-
SHA512
7c37f3080fa5b8c92c72f5c80abeb4a5a53fcc652517864ec7401062c783531ff0cfbeb34f90726a6a9c44e65a226b86091f1e2feaa5f13e75e82c0321f4b185
-
SSDEEP
1536:2f3ZqVEWzImUoIFC7zA9a8gT2aw67JfEAjLdLRRR/FNNHIsM1RLO3IdOrxwfXQ:2vZoDImUo7c0tB7JEMLhdnqsd3wyeXQ
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
db890c64fcf087ee7c757e70a1071f4ccab6c6f6114b3b2afac104f3bf7fa9f1.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ