RunDllHostCallBack
Behavioral task
behavioral1
Sample
70feed69a6e6c40a31a68c05a5c9dcb5a1820a509f094c1d2f4f2574c994c37b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
70feed69a6e6c40a31a68c05a5c9dcb5a1820a509f094c1d2f4f2574c994c37b.dll
Resource
win10v2004-20220812-en
General
-
Target
70feed69a6e6c40a31a68c05a5c9dcb5a1820a509f094c1d2f4f2574c994c37b
-
Size
67KB
-
MD5
4f0466843c28cef502f75c1393f0fdd0
-
SHA1
b381257e742de4164c9ac2ab6aabb615fb3e1554
-
SHA256
70feed69a6e6c40a31a68c05a5c9dcb5a1820a509f094c1d2f4f2574c994c37b
-
SHA512
74d0723125893e7b9f4594e5786567d12d1253bc64c24278e904203de4e6304246211c12a57ab29e2a6a6a050a1d2fa157f4a29ca45198f0b224daf08ffdd8a9
-
SSDEEP
1536:f+w0fZDm4+G8e1PP8YBwVLi4YXXLF6IfudNkPM5m1zvpR8UpHT+n:f+3xcGpLwI2Ph5mxEUpSn
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
70feed69a6e6c40a31a68c05a5c9dcb5a1820a509f094c1d2f4f2574c994c37b.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tldksods Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ