db7d51bba5b8a4e762d91d6a9aa9361a0489ccc703f4336c69169bbb2ba8f8df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db7d51bba5b8a4e762d91d6a9aa9361a0489ccc703f4336c69169bbb2ba8f8df
Size

28KB
MD5

7d6d4e3a54ca6aeaa0d9ef1118a5c47b
SHA1

93b16371c79e6aff76b6ae3d433852492bea0035
SHA256

db7d51bba5b8a4e762d91d6a9aa9361a0489ccc703f4336c69169bbb2ba8f8df
SHA512

04a1bfb4a531473ae6b6ec9ead8f4c409a830a46044d340aba743c2efd835bc663210626fd43e1fc5c3975edfc95830287613329367cfde79ad0207c1e3793b0
SSDEEP

384:QjYOucwm9EbbUHPRjT0GXi/fTqXQ/8bsdWqzYzdM2aSiM7NaLX8xcFwI:mYgkUHJPfi/bqX+8qSqZX8xtI

Score

9^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

db7d51bba5b8a4e762d91d6a9aa9361a0489ccc703f4336c69169bbb2ba8f8df
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

DllCanUnloadNow
DllUnregisterServer

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ