MyLove
Behavioral task
behavioral1
Sample
339753d611adefc532611170ce418fcaf913b0d3696c623d934bf508ca92a1b1.dll
Resource
win7-20221111-en
General
-
Target
339753d611adefc532611170ce418fcaf913b0d3696c623d934bf508ca92a1b1
-
Size
21KB
-
MD5
7fdd994628696ea814433e97f9e7d850
-
SHA1
b3ad9bd1cd70c875016612f3d32f774a9968adaa
-
SHA256
339753d611adefc532611170ce418fcaf913b0d3696c623d934bf508ca92a1b1
-
SHA512
fa5573085fff76aaf6eed1332c0198332e9f2cc59394e4a27d92c7569357f36fc8c72a776ea5db40df1b88e789b57eaa7d1f185b875516a88604780cb587fc2a
-
SSDEEP
384:mLWCpCJ6xhNN8S0gPW2KUCphaMTaR3ItDCuV9UAvdOh+/3o:kzZtN8SVKUCpJTaItO4U6di+/
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
339753d611adefc532611170ce418fcaf913b0d3696c623d934bf508ca92a1b1.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gxwc Size: 538B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE