MyLove
Behavioral task
behavioral1
Sample
2913caca388cbb10409b67578f110594fac16c6e4c56ad60b2854041afe788bd.dll
Resource
win7-20220901-en
General
-
Target
2913caca388cbb10409b67578f110594fac16c6e4c56ad60b2854041afe788bd
-
Size
21KB
-
MD5
011d7a29bf38d8d065113fbf42404400
-
SHA1
6fa44f8b49b83550ffc5c7e585a01bbdfeb08111
-
SHA256
2913caca388cbb10409b67578f110594fac16c6e4c56ad60b2854041afe788bd
-
SHA512
e40df4163966ddbb69ae02c79c3c463714293c4ca6a65fa2888bf9cf514827700f13ec7768006cdf51e099c247481e38ce5304e93959a8d2957be8adce395fe0
-
SSDEEP
384:hTDLepAUnLhpDA2/1gWsctE1Mv3P4dd/VK7uhSsLYZY0Bhxo6dMEOo:9ep/L3Z/1gcEGvP4Q2oYQhxo6dME
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
2913caca388cbb10409b67578f110594fac16c6e4c56ad60b2854041afe788bd.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dubk Size: 555B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE