Behavioral task
behavioral1
Sample
9882f9a37435cc6c085430314c80a03bbbf44b086f5989b78cf720051523fad1.dll
Resource
win7-20220812-en
General
-
Target
9882f9a37435cc6c085430314c80a03bbbf44b086f5989b78cf720051523fad1
-
Size
149KB
-
MD5
a1a779649d623010f462ef03e5372aed
-
SHA1
8b4678991c8bb53cd029b19d2a0a5d2aa187110e
-
SHA256
9882f9a37435cc6c085430314c80a03bbbf44b086f5989b78cf720051523fad1
-
SHA512
0570173ee75a03cc39a069a0a0c11b4d410ade7f8fdf304fd1cc57610e42f10aa524f6c9f11c75ae13328535d6ce6c14923d09aa81f4fbdb2f4887a437bd1758
-
SSDEEP
3072:wW/Q9a1bUMcVEZGmipXm0yL5aUY7ZzdpdfBnnZckowcEv:wWY9a10T2ZfYdBpdfBnn2wce
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
9882f9a37435cc6c085430314c80a03bbbf44b086f5989b78cf720051523fad1.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ