CPlApplet
Behavioral task
behavioral1
Sample
831c902b8fa94024bcd9d3a8a4fa024e44a26ef055773483e373ec698820a6b9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
831c902b8fa94024bcd9d3a8a4fa024e44a26ef055773483e373ec698820a6b9.dll
Resource
win10v2004-20220812-en
General
-
Target
831c902b8fa94024bcd9d3a8a4fa024e44a26ef055773483e373ec698820a6b9
-
Size
304KB
-
MD5
3dbdcc7b0dc8b47a771e03742efed284
-
SHA1
61a72188e46bc20d3de03112b335935b8337d4b1
-
SHA256
831c902b8fa94024bcd9d3a8a4fa024e44a26ef055773483e373ec698820a6b9
-
SHA512
15ebc8d0716c7f888468baa6c1ea1d3a7ac9ab8f3a2ca4dd05505412758524d23bf2b57706c69d0b40fd515b87b7ad57048154e79aa569f3c5e8c318cba12ff3
-
SSDEEP
6144:0MQjV71Ud6cwoyi5a+sQB2KzWK8ErnHnutVYnnbbtcCMnFAhx:03V7Gd6GZyKSKbHuknn2CsAX
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
831c902b8fa94024bcd9d3a8a4fa024e44a26ef055773483e373ec698820a6b9.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 299KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 721KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ