Behavioral task
behavioral1
Sample
85865ef7801d4655ee44e48571ca9261e88273021c88dcbc07b797295adc6afa.dll
Resource
win7-20220901-en
General
-
Target
85865ef7801d4655ee44e48571ca9261e88273021c88dcbc07b797295adc6afa
-
Size
82KB
-
MD5
7e617d7a533b546237e753d720f8af3b
-
SHA1
15c2f36f8f56859f8bef2a2d34fe06a443e92fe1
-
SHA256
85865ef7801d4655ee44e48571ca9261e88273021c88dcbc07b797295adc6afa
-
SHA512
62fd2b3bb13cbff783dd553266f2ed267a8f9c51df78b9bdf29401faea34f624b77eb86d82b8d49e3b23ee40e6448a697ed9c4077753afaa014ab55149bbb4a3
-
SSDEEP
1536:MeVMCjU8jd52ZWaAbGA2ACaP6QbUFsY5nu1XVJZGQfaNiiJ:MeVMCjJh5oWdf2/aPlQSY5u1lJZGJ
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
85865ef7801d4655ee44e48571ca9261e88273021c88dcbc07b797295adc6afa.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ