MyLove
Behavioral task
behavioral1
Sample
7681195963d27f757b7b8d6061d1e9479f04796e5e7d3d4299f18d8549fb901d.dll
Resource
win7-20220901-en
General
-
Target
7681195963d27f757b7b8d6061d1e9479f04796e5e7d3d4299f18d8549fb901d
-
Size
21KB
-
MD5
65b3677f768c7e975016735237a00830
-
SHA1
0192905a7b49625bf4c8e26729c3358e49b614f6
-
SHA256
7681195963d27f757b7b8d6061d1e9479f04796e5e7d3d4299f18d8549fb901d
-
SHA512
fdd71aad1cd01f7bac0e41ff4239a87fefcade13c3f8ff2355b31ce0d4b62be2236cec0e286f043ee268ac3ad0b3263665e5c8e4c9d7489711fa382966c5bdb2
-
SSDEEP
384:iLWCpCJ6xhNN8S0gPW2KUCphaMTaR3ItDCuV9UAvdOh+/3o:4zZtN8SVKUCpJTaItO4U6di+/
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
7681195963d27f757b7b8d6061d1e9479f04796e5e7d3d4299f18d8549fb901d.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xeri Size: 591B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE