Behavioral task
behavioral1
Sample
2344b7773eec1fe20cfa14e2ef1d433d6824a4f303362ca75e7b41e7d6ac3013.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2344b7773eec1fe20cfa14e2ef1d433d6824a4f303362ca75e7b41e7d6ac3013.dll
Resource
win10v2004-20221111-en
General
-
Target
2344b7773eec1fe20cfa14e2ef1d433d6824a4f303362ca75e7b41e7d6ac3013
-
Size
56KB
-
MD5
90e11021d7d686496333d499234e0f50
-
SHA1
54597fe8e8c99fa5e2f31b69ae57adc6278d9e1f
-
SHA256
2344b7773eec1fe20cfa14e2ef1d433d6824a4f303362ca75e7b41e7d6ac3013
-
SHA512
15750a2229994b4e5b26c5ba9910428cf0c43f86027e8539bd5b35b84a3c36fe5da55bedb83679470625a9c9fe3937ddba1da2f42d4f85f4150d053f8cf12b08
-
SSDEEP
768:Ksyqn2Fy/XW+M/8fFDdFxO4PJ+g/k8LflKTmPBZ1t0OJJc0RRDrooylYUtiAkFZg:vn24Gt/8fFvL1rOmTAOJ/RDrvUtixFy
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
2344b7773eec1fe20cfa14e2ef1d433d6824a4f303362ca75e7b41e7d6ac3013.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ