RunDllHostCallBack
Behavioral task
behavioral1
Sample
ef336014f8dcaca12665b84885ca97e1b29afd09228f94df100ab2baab6458d5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef336014f8dcaca12665b84885ca97e1b29afd09228f94df100ab2baab6458d5.dll
Resource
win10v2004-20220812-en
General
-
Target
ef336014f8dcaca12665b84885ca97e1b29afd09228f94df100ab2baab6458d5
-
Size
60KB
-
MD5
466e1872c0ba21876e6ec809d09316af
-
SHA1
d1e563d2647f6161217c4dd7a61091f909e03242
-
SHA256
ef336014f8dcaca12665b84885ca97e1b29afd09228f94df100ab2baab6458d5
-
SHA512
2b9c669d782bdece70ab347ecf641d8097c914caef610e38d11e424250ce2117ea0de7161783553ab5db1a09f8056fd923b3b2460e51b30ed3ae745536c2e706
-
SSDEEP
1536:sV4Jdz+svQY9t+jvzZKh/4MnZQssIp5H4D/MFULPzeiCIlyVZR:wWdroYz+nZKh/4uhvYDEFULztCI4VZR
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
ef336014f8dcaca12665b84885ca97e1b29afd09228f94df100ab2baab6458d5.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tldksods Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ