CFhuiy
Behavioral task
behavioral1
Sample
cf9c81539c669e45914d9ff50ef68ecc94cb0c75093f58b6e6e062e3c2a36623.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cf9c81539c669e45914d9ff50ef68ecc94cb0c75093f58b6e6e062e3c2a36623.dll
Resource
win10v2004-20221111-en
General
-
Target
cf9c81539c669e45914d9ff50ef68ecc94cb0c75093f58b6e6e062e3c2a36623
-
Size
868KB
-
MD5
ddc5d9d2caa51c5fb83bc4acf8d5e397
-
SHA1
8d1aac5c7ada2454461a1b89210aeb435a135193
-
SHA256
cf9c81539c669e45914d9ff50ef68ecc94cb0c75093f58b6e6e062e3c2a36623
-
SHA512
aca75dcc81e04d2a9440d7f30ef95a4a4f22b52c9aef5b91ff97d1d93e01403aee3137dd4175c1a1e26b1d4304746bf5715a609392de62000047b731cf2cac3d
-
SSDEEP
24576:2oWjpCuGrpXmaZUm1xpBVGp1rdL8Qk/aaBC0fE:2tjipW1mXpO1t8tg0
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
cf9c81539c669e45914d9ff50ef68ecc94cb0c75093f58b6e6e062e3c2a36623.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 680KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 860KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE