odog
Behavioral task
behavioral1
Sample
6ff2ffbffd69c890f3ba7e605bfa7d8829d65a58e7c6dfd3e17bfeba41e289c1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ff2ffbffd69c890f3ba7e605bfa7d8829d65a58e7c6dfd3e17bfeba41e289c1.dll
Resource
win10v2004-20220812-en
General
-
Target
6ff2ffbffd69c890f3ba7e605bfa7d8829d65a58e7c6dfd3e17bfeba41e289c1
-
Size
11KB
-
MD5
b4eca6d3a70e98b71d49090a33d48d70
-
SHA1
ac513f4686eb7266076cd3eb524c915790798055
-
SHA256
6ff2ffbffd69c890f3ba7e605bfa7d8829d65a58e7c6dfd3e17bfeba41e289c1
-
SHA512
8e24f5dc2df3d8e64aae55ccb8acde7bbec96fccddd3cab9cf9992881744b0beeda744c014fa31013025291bb64194714e466122997e6bfcf308c9339f497612
-
SSDEEP
192:6BUU9F/0C7zTYumg6QIhe1ng5lfDnqeXsXZhafW7pW:6BUmFN7HbmbQIheZel+eXspuW7pW
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
6ff2ffbffd69c890f3ba7e605bfa7d8829d65a58e7c6dfd3e17bfeba41e289c1.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ