CPlApplet
Behavioral task
behavioral1
Sample
193405f20090893023c38f5caf1c0fbb6e0bf3bf0fab0e5af090bfa1d3ece426.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
193405f20090893023c38f5caf1c0fbb6e0bf3bf0fab0e5af090bfa1d3ece426.dll
Resource
win10v2004-20220812-en
General
-
Target
193405f20090893023c38f5caf1c0fbb6e0bf3bf0fab0e5af090bfa1d3ece426
-
Size
355KB
-
MD5
6774115ea7bedb4270506d434d4534b0
-
SHA1
413ff61147978722f9691f8aba3a6000ee7cc84f
-
SHA256
193405f20090893023c38f5caf1c0fbb6e0bf3bf0fab0e5af090bfa1d3ece426
-
SHA512
9d3a5ad84e7e9f60620a9be5c812f056718fe523b0459f2e4696997c99122965939dafa73e73b01ffeeb05bda642f78391d8e49994ad2c788cdf0c28967277ab
-
SSDEEP
6144:lg1Tqx9KYn3am9j9p+c520cEugX3qKc1f/b8NnYT7/7ESd2Q:GZIKlS9kcgPQ01fDQs7Z
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
193405f20090893023c38f5caf1c0fbb6e0bf3bf0fab0e5af090bfa1d3ece426.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 632KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 346KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 793KB - Virtual size: 792KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 71B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ