MyLove
Behavioral task
behavioral1
Sample
5fad9b2d76aa98f16a1f25dda3c518e2ade64ba5a3146071f2bbe2cdc70ab62c.dll
Resource
win7-20220812-en
General
-
Target
5fad9b2d76aa98f16a1f25dda3c518e2ade64ba5a3146071f2bbe2cdc70ab62c
-
Size
21KB
-
MD5
ff4f47dc0029c1f0a7c3177b6c859ab5
-
SHA1
6417b61ff141dc69bd18b854b28efaa248f26fa7
-
SHA256
5fad9b2d76aa98f16a1f25dda3c518e2ade64ba5a3146071f2bbe2cdc70ab62c
-
SHA512
96211278c44a0711fe5c6cc10edd0ac437b3aa294da3b293ffd00c9c101ff8e5fc644666e7533dff779498331d4c6ae1d4a79b502f5363b6dc7b6fe7c141eeb4
-
SSDEEP
384:yLWCpCJ6x37z8MxLvLW9GhOEv+fmuhx+VqC0eWPpnwDL9ADemjx5uo:ozZhFxLDW9Gc9fmuhxKqCCyL93mP
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
5fad9b2d76aa98f16a1f25dda3c518e2ade64ba5a3146071f2bbe2cdc70ab62c.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brkl Size: 513B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE