MyLove
Behavioral task
behavioral1
Sample
8b33a50dd3aeb0c7e989c9697eb6039727cd6cf7c912e8f93fb2831232f77a13.dll
Resource
win7-20221111-en
General
-
Target
8b33a50dd3aeb0c7e989c9697eb6039727cd6cf7c912e8f93fb2831232f77a13
-
Size
21KB
-
MD5
f185805b611b3e0e34762bdc9aed69f0
-
SHA1
f66491cfc4f7a55b80bebc805c5300148dbe311f
-
SHA256
8b33a50dd3aeb0c7e989c9697eb6039727cd6cf7c912e8f93fb2831232f77a13
-
SHA512
d2cf5903ca9f02de521dfc55d244bfb3bf770710f7413013e0f90a0b22d751d5dd20d22d87db748d9bcb53e2f5d3abce11784c46b954dc1b315a10c687dd8126
-
SSDEEP
384:fLWCpCJ6xhNN8S0gPW2KUCphaMTaR3ItDCuV9UAvdOh+/3o:zzZtN8SVKUCpJTaItO4U6di+/
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
8b33a50dd3aeb0c7e989c9697eb6039727cd6cf7c912e8f93fb2831232f77a13.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hruu Size: 592B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE