Behavioral task
behavioral1
Sample
346b6417e84b608b2d89f12a84ff256c6ad81b8df95191da2ff990d981811e09.dll
Resource
win7-20220812-en
General
-
Target
346b6417e84b608b2d89f12a84ff256c6ad81b8df95191da2ff990d981811e09
-
Size
163KB
-
MD5
e002b8f51bedb4ba19c18cdb53b70340
-
SHA1
cd3b1431896f51ef7d89abf29bdbfecf6e9e2311
-
SHA256
346b6417e84b608b2d89f12a84ff256c6ad81b8df95191da2ff990d981811e09
-
SHA512
c2d177b058337d21ab6e3758cc5fc255766bf1ccbd583ae294a861256570210c5942a25545e86bb83d7812c028a503cf69cb5b7d55ecfbfb20e5bab70a525864
-
SSDEEP
3072:bjl3Sn1Si4muVMs3ASb4ys5JBx/pUpU5nXUORCyGaCv29KbXgftbw9EndJ6o3Gmo:f0n1SiTuTwSbYBx/26XUORCLaCOMbyRk
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
346b6417e84b608b2d89f12a84ff256c6ad81b8df95191da2ff990d981811e09.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ