CPlApplet
Behavioral task
behavioral1
Sample
0699550095267e76765d53c5d6ac4e6b167b0ad943fe12c7f3ef57974f61071f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0699550095267e76765d53c5d6ac4e6b167b0ad943fe12c7f3ef57974f61071f.dll
Resource
win10v2004-20220812-en
General
-
Target
0699550095267e76765d53c5d6ac4e6b167b0ad943fe12c7f3ef57974f61071f
-
Size
190KB
-
MD5
32f895ab53270f4875a4f0fc443be8b8
-
SHA1
d5dd80bb264eb034f5337121b4843b31570769c6
-
SHA256
0699550095267e76765d53c5d6ac4e6b167b0ad943fe12c7f3ef57974f61071f
-
SHA512
ba9c5bc1aac5494a28e3e5d358d131d4a46e25897dcc616242bcd0959bc707447735ba644a4c225b2f9a7e0dcec2c0ffab2d2d30df48ab0d6ac94fd290a99633
-
SSDEEP
3072:277ghPb9dNjjWp3KMEzX64PTLLZzNVB5z1L9bL/Dp9r6fv9p6zF3HZ:7dbzsazKYTtNb1tpTmFp6zF3
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
0699550095267e76765d53c5d6ac4e6b167b0ad943fe12c7f3ef57974f61071f.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 433KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ