Behavioral task
behavioral1
Sample
cd424b15c7baddeb5eb741f33fdadc95817d594bda791f3fa999d10783f1ede2.dll
Resource
win7-20220812-en
General
-
Target
cd424b15c7baddeb5eb741f33fdadc95817d594bda791f3fa999d10783f1ede2
-
Size
139KB
-
MD5
6e29ccf6cabf92d9b92bb53657ce53ac
-
SHA1
4d57e22a368752771eca8adc79a2a7ab54ddf68b
-
SHA256
cd424b15c7baddeb5eb741f33fdadc95817d594bda791f3fa999d10783f1ede2
-
SHA512
f9abb0f0a6beb46465ef3a74c09e276f6c21b584ce6dd2431df5e9ca75a263b29f07db9f70ffe08fd5a091a8d73f70e49d3e3d0cc8d73d64b406b166ac5b24ce
-
SSDEEP
3072:cjl3Sn1Si4muVMs3ASb4ys5JBx/pUpU5nXUORCyGaCv29KbXgftbw9EnB:y0n1SiTuTwSbYBx/26XUORCLaCOMbyRT
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
cd424b15c7baddeb5eb741f33fdadc95817d594bda791f3fa999d10783f1ede2.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ