RunDllHostCallBack
Behavioral task
behavioral1
Sample
b7364b005f22daa70d7843fff90f8fa45733acda95472b2b4c34842d4e16f4b8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b7364b005f22daa70d7843fff90f8fa45733acda95472b2b4c34842d4e16f4b8.dll
Resource
win10v2004-20221111-en
General
-
Target
b7364b005f22daa70d7843fff90f8fa45733acda95472b2b4c34842d4e16f4b8
-
Size
58KB
-
MD5
2734fc1625783153deaf2649ad9a1a30
-
SHA1
b6297c4f6a09e0a0aed89999fccd571299b4cdc6
-
SHA256
b7364b005f22daa70d7843fff90f8fa45733acda95472b2b4c34842d4e16f4b8
-
SHA512
f24fe5e99ed06a7969471c3fda494a545df6e93cd4e59511ce2103f44bd0e09316db7c6a224443210a87444c8a609d85210c9d07720c794751181c9984886ae3
-
SSDEEP
768:ZujfnoaiGDwbzgduJqSwy3lzPPGIc2XPDcxM/r5t5Wle78rYShjWm+919pVWQozn:MjfoaNd9doR7nTF7YZyX65FYmd
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
b7364b005f22daa70d7843fff90f8fa45733acda95472b2b4c34842d4e16f4b8.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tldksods Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ