�ǰ����������Զ���������
Behavioral task
behavioral1
Sample
28b1e8217058ab461d61799030e1cc8d79fc50f17582a3afcb90b4e2af7e4dd5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28b1e8217058ab461d61799030e1cc8d79fc50f17582a3afcb90b4e2af7e4dd5.dll
Resource
win10v2004-20221111-en
General
-
Target
28b1e8217058ab461d61799030e1cc8d79fc50f17582a3afcb90b4e2af7e4dd5
-
Size
276KB
-
MD5
86d7094d88a9761e1a8f0a3238644954
-
SHA1
8547d402eaf37c4fbfff47f6024030fca2923d32
-
SHA256
28b1e8217058ab461d61799030e1cc8d79fc50f17582a3afcb90b4e2af7e4dd5
-
SHA512
fddfd51d032b580e1c51357d249fde32f86dc5a01388735d413dec75dc8be0085e9ffd4191b5ebfe4bfb8cfa1a93ac4c27d8149788e89ee6d36727dcb1e5e696
-
SSDEEP
6144:+ZX0VQolI5w1DUSdBWxqA7lW3FpOfLQh3qRlA21MQwyWJUW16/w7Z:+ZEhxFWXWVpOfi6R2AHWBqw7
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
28b1e8217058ab461d61799030e1cc8d79fc50f17582a3afcb90b4e2af7e4dd5.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 572KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 244KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 416KB - Virtual size: 415KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ