KeyboardHookProc
Behavioral task
behavioral1
Sample
8f833ceea08ea25f5ea1cb1cb9875f90bdeee7181cd58788b0255e04b801b437.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f833ceea08ea25f5ea1cb1cb9875f90bdeee7181cd58788b0255e04b801b437.dll
Resource
win10v2004-20221111-en
General
-
Target
8f833ceea08ea25f5ea1cb1cb9875f90bdeee7181cd58788b0255e04b801b437
-
Size
11KB
-
MD5
9c91bf820a856298676621b3dcc8ace3
-
SHA1
bf3acf379ff11b2c2ba19b725ea34463be56e0ad
-
SHA256
8f833ceea08ea25f5ea1cb1cb9875f90bdeee7181cd58788b0255e04b801b437
-
SHA512
e1d2bb54218925730942b25d8cf2ade9d9c93ffbd43cbdead6f0852bd88a265f5ce3edba162f27649f822faf627c43f2c5c8572176021a1f6421bf29ae5b4720
-
SSDEEP
192:nrP+AvfGCEP+xkEUyPA4PUUK0sf5xCWPAhXDe1ThsoUtoze1i:KAXGNP+xjUyPlJef+xT2hsr
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
8f833ceea08ea25f5ea1cb1cb9875f90bdeee7181cd58788b0255e04b801b437.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ