ca97cfc3360abdf981e4560bf75ea7afa52643afb683b68279b58cd0d0452771 | Triage

Sharing

General

Target

ca97cfc3360abdf981e4560bf75ea7afa52643afb683b68279b58cd0d0452771
Size

25KB
MD5

e8240644d6f777f2721ce998508da760
SHA1

2052b7d055ea11dc0b57bf1a4338b61392c042bf
SHA256

ca97cfc3360abdf981e4560bf75ea7afa52643afb683b68279b58cd0d0452771
SHA512

32a9f5c7d0612ca1bf6f427ffc2b99628025d065ac37bacab65dfc06c3b432edcaf604d0a08842c477b4bd0986187eb0ccc736af4d4b96949aac78d71fd88548
SSDEEP

384:d4cvbhvCA6G1vaiuZRss4+p6h12zIf7jU0c0JOmKDCvjRiaaHC8V86rtc:d1zuG1pYRnZMvwsjXvUu7RaC+8+tc

Score

9^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ca97cfc3360abdf981e4560bf75ea7afa52643afb683b68279b58cd0d0452771
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_ldr@16

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ