Behavioral task
behavioral1
Sample
4a164bfae7f42a4199159a6a976603ae7487498f87cef53e8ed525b8b71c090b.dll
Resource
win7-20220812-en
General
-
Target
4a164bfae7f42a4199159a6a976603ae7487498f87cef53e8ed525b8b71c090b.7z
-
Size
152KB
-
MD5
583c9f6f0a30ead3d15c57bc870d8c93
-
SHA1
4e8b519fa9694fe4ab1877f594f1a10f63cda5f2
-
SHA256
3e05574fd17fc6254464aeddd35d4766738d393dadede62a3b09c641a84c9cc4
-
SHA512
f7bdc5c1e1c021abde6cffe9f2ae9e6c4efca3e41e83dd280dd8a671a3d282ada7b12a8e25ac89c95048d24f404495c9297747879599cd3569aecf5abda7a7e2
-
SSDEEP
3072:K0bnTtXVxBCKTSZnmTdOuWtzybuGpRngOv5iroqutj4v0TEXU/:K+RXBhgnmIuWtEuygmgsq1cTwa
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/4a164bfae7f42a4199159a6a976603ae7487498f87cef53e8ed525b8b71c090b acprotect -
resource yara_rule static1/unpack001/4a164bfae7f42a4199159a6a976603ae7487498f87cef53e8ed525b8b71c090b upx
Files
-
4a164bfae7f42a4199159a6a976603ae7487498f87cef53e8ed525b8b71c090b.7z.7z
Password: infected
-
4a164bfae7f42a4199159a6a976603ae7487498f87cef53e8ed525b8b71c090b.dll windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 14KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ