MyLove
Behavioral task
behavioral1
Sample
d5aa3f2b5f72812d0b58eb98dacf98bbbb852943a8fa7281309e110a7fd4d811.dll
Resource
win7-20220812-en
General
-
Target
d5aa3f2b5f72812d0b58eb98dacf98bbbb852943a8fa7281309e110a7fd4d811
-
Size
21KB
-
MD5
7df5eb3be6e3023201748d7c21ca351e
-
SHA1
a5d57688c182489d9f3f92502ba51456555f5313
-
SHA256
d5aa3f2b5f72812d0b58eb98dacf98bbbb852943a8fa7281309e110a7fd4d811
-
SHA512
6fa3aaacf5fff1587a5a68917237b70aeab4abad1024e5218953f2db1d59667f8898540840fbc2d8c6fd0df0941d7e3bae28b329c51b744b13f0fbc02f6e8798
-
SSDEEP
384:lLWCpCJ6xhNN8S0gPW2KUCphaMTaR3ItDCuV9UAvdOh+/3o:ZzZtN8SVKUCpJTaItO4U6di+/
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
d5aa3f2b5f72812d0b58eb98dacf98bbbb852943a8fa7281309e110a7fd4d811.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uhaa Size: 607B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE