ovun
Behavioral task
behavioral1
Sample
3d77523b35568ca491ee911abc64abeb67f44ec67f83b96f21a37f927cecd831.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3d77523b35568ca491ee911abc64abeb67f44ec67f83b96f21a37f927cecd831.dll
Resource
win10v2004-20221111-en
General
-
Target
3d77523b35568ca491ee911abc64abeb67f44ec67f83b96f21a37f927cecd831
-
Size
11KB
-
MD5
98f6ef2c5b42e866d6ebdf41a48b5f70
-
SHA1
f346abacfeb005929549a64d2bb9edf10ea9a66a
-
SHA256
3d77523b35568ca491ee911abc64abeb67f44ec67f83b96f21a37f927cecd831
-
SHA512
e775d6b1006591c325756f9cc1ae6b57f8f548e11daf048dbe10907b4a3bb7e7faac3b8501cef00416e3e9b7d84332390be065f9979c99c3629e02cfb4d85f6f
-
SSDEEP
192:l9HVX4l2xN/mp/Y5tnKd8I/JnasOCPI/P3s6fGjUyWfWi:l9CcxsQ5tKuMJnaf/fs6fGNWfWi
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
3d77523b35568ca491ee911abc64abeb67f44ec67f83b96f21a37f927cecd831.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 978B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ