Behavioral task
behavioral1
Sample
dd2bb79c039489198fd5d33d2153f03788a0eb57cc07db19f1e17960de2dbf1f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd2bb79c039489198fd5d33d2153f03788a0eb57cc07db19f1e17960de2dbf1f.dll
Resource
win10v2004-20221111-en
General
-
Target
dd2bb79c039489198fd5d33d2153f03788a0eb57cc07db19f1e17960de2dbf1f
-
Size
46KB
-
MD5
72cade1c0cb0139ef82ddb750f979baf
-
SHA1
dfa25056649576a22ccd78ed16059233d8e8d0aa
-
SHA256
dd2bb79c039489198fd5d33d2153f03788a0eb57cc07db19f1e17960de2dbf1f
-
SHA512
20ce276050cc89191b17bebdd12e961289a1f021cd7bbaea6af87460b0c507506e3b8cbd3c9fe62b0d07811e1a5ba8bac264a9a0930d32b302ee552d0c165fbc
-
SSDEEP
768:LIuAyMV8TYQgXblAHc5CCH3PXl1fVhrcy9DRoYbVeMmUR/Kdkjq8:PAL8XgBn5r3D9hrd9DeMlRi2jq8
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
dd2bb79c039489198fd5d33d2153f03788a0eb57cc07db19f1e17960de2dbf1f.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zcata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vcata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ