CreateInterface
Behavioral task
behavioral1
Sample
476332f8d54e29e49a13b9111d05cf4eaa733a8247ef0a05553f9f5ef34fa24c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
476332f8d54e29e49a13b9111d05cf4eaa733a8247ef0a05553f9f5ef34fa24c.dll
Resource
win10v2004-20220901-en
General
-
Target
476332f8d54e29e49a13b9111d05cf4eaa733a8247ef0a05553f9f5ef34fa24c
-
Size
39KB
-
MD5
07570e0a5a5ab959a191519bac4542c7
-
SHA1
6b714d292e163b9b443df0cc40bfc95db71bf46c
-
SHA256
476332f8d54e29e49a13b9111d05cf4eaa733a8247ef0a05553f9f5ef34fa24c
-
SHA512
fbe40f834511ee415d4799f5672db4cf743b8588f5944a68b3972ab53ddeb5e6e13cfdcb147b004e7442a61b1190738f9c5d02ebe05982ee4bc41ccf41a9b1be
-
SSDEEP
768:Xs4ntnElhJyrECzvoR0YkzwkTNHQsriAk+zxKFjWGMg1CR/8cua/P:Xs4nt4h8YCjomwkasriAojWGBCyw
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
476332f8d54e29e49a13b9111d05cf4eaa733a8247ef0a05553f9f5ef34fa24c.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ