odur
Behavioral task
behavioral1
Sample
5f2078c0915aec890e56b532bbeb7f3605761f2f7c83bc9814a3fb62fbe2f76b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f2078c0915aec890e56b532bbeb7f3605761f2f7c83bc9814a3fb62fbe2f76b.dll
Resource
win10v2004-20220812-en
General
-
Target
5f2078c0915aec890e56b532bbeb7f3605761f2f7c83bc9814a3fb62fbe2f76b
-
Size
11KB
-
MD5
7b77bfc6757fbf3d1ccf06d3ddc8d466
-
SHA1
cc211d941cfb2a0e4c134322f701eb133e39062d
-
SHA256
5f2078c0915aec890e56b532bbeb7f3605761f2f7c83bc9814a3fb62fbe2f76b
-
SHA512
5c08f702bda2ea097aa472110a28e8b00509dae8560c39c313b5de7e3897a144b6afc4e58cfd996ad327fbcaf5ab97e5c00f7ec9f3fd6e668ac2e855f61972a0
-
SSDEEP
192:9/RhTwBWnRmLqIdybhQlP8ZKLF8wI3GihmAuRsVeyD84CND0iphAWhoWW:9/RWBWnkLnWhZKLaV3G8mAd4yYTNvp6W
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
5f2078c0915aec890e56b532bbeb7f3605761f2f7c83bc9814a3fb62fbe2f76b.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ