RunDllHostCallBack
Behavioral task
behavioral1
Sample
e0938a6427f86518a5e724b71555c7090932cf25ba65a523049838b4bd423995.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e0938a6427f86518a5e724b71555c7090932cf25ba65a523049838b4bd423995.dll
Resource
win10v2004-20220812-en
General
-
Target
e0938a6427f86518a5e724b71555c7090932cf25ba65a523049838b4bd423995
-
Size
44KB
-
MD5
0ccf629761e6b956d41b364d36860ac0
-
SHA1
88da7d3ab7a01435a5e9e400f3da186a23cd149d
-
SHA256
e0938a6427f86518a5e724b71555c7090932cf25ba65a523049838b4bd423995
-
SHA512
c2e2d5a0746ba15b547612369fd76df613ecfa257160da4998bab8b779ad75f6f539ee826402fdb77443f18d62658586aa6b9c9362818f645cde9b8e140372a0
-
SSDEEP
768:TUkuD0/PbsK/VyTw2JPKOHr9pSS6OotrhaP/SPXfKmE0osJbk595uL3BCy8j9gn0:TMYnbsFTw2JJr7S3ttrhaPUXffEzobkr
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
e0938a6427f86518a5e724b71555c7090932cf25ba65a523049838b4bd423995.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tldksods Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ