20523d496a18c0823e617f3425a8e7458aa8b51a3af84c37e7f3cecd872b9ffe

Sharing

Copy URL Twitter E-mail

General

Target

20523d496a18c0823e617f3425a8e7458aa8b51a3af84c37e7f3cecd872b9ffe
Size

1.2MB
MD5

2ae2f95a582c899c36ef233f4ddd0eca
SHA1

a380dbe888cbe8d56a2f7dbb32a6269301a5ade5
SHA256

20523d496a18c0823e617f3425a8e7458aa8b51a3af84c37e7f3cecd872b9ffe
SHA512

ba682e28b3b1548aeb3fe452413aaea7af4d50588ab5f7a4f4f438f2292e1f7f952e9816bb99dab985c2347848c38aec3afae0829d6b5265c54c77cbb6473f5c
SSDEEP

24576:Taxg1Hm8D9am3nWStSS3IOgCGnrKVCxMXagNJLzizXilwrgnPYa42KdZSM42U6:O61HHBa+Wd10VCx+PLzkykIPC2K/SMm6

Score

9^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

20523d496a18c0823e617f3425a8e7458aa8b51a3af84c37e7f3cecd872b9ffe
.dll windows x86

Code Sign

6c:19:1b:1c:38:87:e4:9d:4e:46:32:f5:4c:c5:c3:eb
Certificate

Issuer

CN=Realcool Software,1.2.840.113549.1.9.1=#0c18737570706f7274407265616c636f6f6c736f66742e636f6d

Not Before

31/12/2009, 16:00

Not After

31/12/2109, 16:00

Subject

CN=Realcool Software,1.2.840.113549.1.9.1=#0c18737570706f7274407265616c636f6f6c736f66742e636f6d

b8:cc:c6:a6:03:b4:a9:1f:eb:1a:16:7b:a8:37:51:86:4a:61:14:09
Signer

Actual PE Digest

b8:cc:c6:a6:03:b4:a9:1f:eb:1a:16:7b:a8:37:51:86:4a:61:14:09

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Realcool Software,1.2.840.113549.1.9.1=#0c18737570706f7274407265616c636f6f6c736f66742e636f6d

14/10/2022, 21:49
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

CreateDataSource
IDDoImport
IDImport
IDRelease
Install
InstallFile
ReleaseDataSource
UninstallFile

Sections

UPX0
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 769KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

6c:19:1b:1c:38:87:e4:9d:4e:46:32:f5:4c:c5:c3:ebCertificate

b8:cc:c6:a6:03:b4:a9:1f:eb:1a:16:7b:a8:37:51:86:4a:61:14:09Signer

Signature Validations

Verification

14/10/2022, 21:49 Valid: false

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 2.9MB

UPX1 Size: 1.2MB - Virtual size: 1.2MB

.rsrc Size: 25KB - Virtual size: 28KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 769KB - Virtual size: 768KB

.data Size: 61KB - Virtual size: 163KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 199KB - Virtual size: 198KB

.reloc Size: 347KB - Virtual size: 346KB

6c:19:1b:1c:38:87:e4:9d:4e:46:32:f5:4c:c5:c3:eb
Certificate

b8:cc:c6:a6:03:b4:a9:1f:eb:1a:16:7b:a8:37:51:86:4a:61:14:09
Signer

14/10/2022, 21:49
Valid: false

UPX0
Size: - Virtual size: 2.9MB

UPX1
Size: 1.2MB - Virtual size: 1.2MB

.rsrc
Size: 25KB - Virtual size: 28KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 769KB - Virtual size: 768KB

.data
Size: 61KB - Virtual size: 163KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 199KB - Virtual size: 198KB

.reloc
Size: 347KB - Virtual size: 346KB