blah
Behavioral task
behavioral1
Sample
e5b568308fd0db81fb5d7bbcbf3695d1893e705e1a04cb36e156860c32267f04.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e5b568308fd0db81fb5d7bbcbf3695d1893e705e1a04cb36e156860c32267f04.dll
Resource
win10v2004-20220812-en
General
-
Target
e5b568308fd0db81fb5d7bbcbf3695d1893e705e1a04cb36e156860c32267f04
-
Size
16KB
-
MD5
8e55d391645a03ada72cc65dfe1d6b00
-
SHA1
b18adb6d14a1c146b4ee36f3f03470677c185ec9
-
SHA256
e5b568308fd0db81fb5d7bbcbf3695d1893e705e1a04cb36e156860c32267f04
-
SHA512
aab1bb683b02a672ad1c59e64a80e98bf1d0aaa02a90cdbe4d4078568dd12e0a96e8c4b9e6387646c44ea997994ffa6e76e603ecd088d25eb0efc5c070995076
-
SSDEEP
384:Eg/9m7f9OzuPlMco4F5hAK8gAEOK4/vGzpSApZ:KfAzBco0TAK8dEVSvGzzr
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
e5b568308fd0db81fb5d7bbcbf3695d1893e705e1a04cb36e156860c32267f04.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ