Behavioral task
behavioral1
Sample
293ed9613110bcd75ac57e19bcc5b9ada5b95f473363e5f9f9524da2ba3af74f.dll
Resource
win7-20220812-en
General
-
Target
293ed9613110bcd75ac57e19bcc5b9ada5b95f473363e5f9f9524da2ba3af74f
-
Size
164KB
-
MD5
c97d60817f076f3213098e07ea9b5c22
-
SHA1
7c6b70e24b5ad666caaed440196bc86db809e7a3
-
SHA256
293ed9613110bcd75ac57e19bcc5b9ada5b95f473363e5f9f9524da2ba3af74f
-
SHA512
5bbab4e30d559f223bd025387934d9b7661cf53aeff853be1a4655dc6d0ec57eb6a15c1ac2fb365eec6aabfdfb44030dfba9724645f6955a5436937d15ebd2e7
-
SSDEEP
3072:2/4qBAx1KaT1e7WWsmdpQb1NZXI0mWqLnviAhXB8rlLTM5vy3vhFPaq+:2/DBEsaZe6SePZXI0HqLnvTUlLYZy3Ji
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
293ed9613110bcd75ac57e19bcc5b9ada5b95f473363e5f9f9524da2ba3af74f.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ