ifyx
Behavioral task
behavioral1
Sample
4e238cfb4ba968910f435c3b685406c9025baa266b75d9495df46a1248d70984.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4e238cfb4ba968910f435c3b685406c9025baa266b75d9495df46a1248d70984.dll
Resource
win10v2004-20220901-en
General
-
Target
4e238cfb4ba968910f435c3b685406c9025baa266b75d9495df46a1248d70984
-
Size
11KB
-
MD5
7f3f47562aaa063bc2b2f76da143c640
-
SHA1
13a48d6b7bad34718625fc2bf0de89baa08723d0
-
SHA256
4e238cfb4ba968910f435c3b685406c9025baa266b75d9495df46a1248d70984
-
SHA512
6aa669ca2e809767bd7fa8ed1161d16d490b715a62084ae24db9a5aecb0966b3fd435f4f041bc48752bf69363d2768f988d2b982f5c86f016ecb9355e4492206
-
SSDEEP
192:vsOrWmPFG/AIMtOc1CkoWkRtvhRvZSWxGuGKezAIhGWfUHBlhlWJUWy:kkdyaOc8krqgjfh4HD/WJUW
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
4e238cfb4ba968910f435c3b685406c9025baa266b75d9495df46a1248d70984.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 929B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ