MyLove
Behavioral task
behavioral1
Sample
5b18b3cb77e5aa2e1ea1195b9f82a8703b3c1637393c770648366d480fb7ae18.dll
Resource
win7-20220901-en
General
-
Target
5b18b3cb77e5aa2e1ea1195b9f82a8703b3c1637393c770648366d480fb7ae18
-
Size
21KB
-
MD5
7aec00b1baeef1e9ea44823d2c7c814b
-
SHA1
44bcfc0958059f5766ad1991153157ef79fa4148
-
SHA256
5b18b3cb77e5aa2e1ea1195b9f82a8703b3c1637393c770648366d480fb7ae18
-
SHA512
e0cd3af709a56e07eb4afaa8dc659dc47f106ab778cc90d7b8a4276accbfd61366d62e6e78dda82d99055a1d5ba89c91dec9f63b4e3c930025c9127b30521f76
-
SSDEEP
384:sLWCpCJ6x37z8MxLvLW9GhOEv+fmuhx+VqC0eWPpnwDL9ADemjx5uo:6zZhFxLDW9Gc9fmuhxKqCCyL93mP
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
5b18b3cb77e5aa2e1ea1195b9f82a8703b3c1637393c770648366d480fb7ae18.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lejo Size: 582B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE