vamrihonhptqg
Behavioral task
behavioral1
Sample
e177c42233db42694ecc4332d70541e0081d9a2e2360ab9ff84a3d062ecff9fc.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e177c42233db42694ecc4332d70541e0081d9a2e2360ab9ff84a3d062ecff9fc.dll
Resource
win10v2004-20221111-en
General
-
Target
e177c42233db42694ecc4332d70541e0081d9a2e2360ab9ff84a3d062ecff9fc
-
Size
133KB
-
MD5
7ebf0cb7e187c855b2d094dcbc61d79e
-
SHA1
a6af33f6032c8490afefe3d3ba6fbe4637c8d3f1
-
SHA256
e177c42233db42694ecc4332d70541e0081d9a2e2360ab9ff84a3d062ecff9fc
-
SHA512
c29d459a9a22dcf269a20820f8dffe1f7874a24272e53fa9afdd6d75bfacf97dcf16eb6822d34497c59d0c7454aae79ebc2ee832953e7c580d637c19ad9150c5
-
SSDEEP
3072:r0w2K0pYoF1cn0OLHe4gzUvMsZBLip4X9X6UIrVnYEOy:r0w2TFanF5ZspMX5IrBYEOy
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
e177c42233db42694ecc4332d70541e0081d9a2e2360ab9ff84a3d062ecff9fc.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ