Behavioral task
behavioral1
Sample
f5906a7263105b567163d7a8f87f5f676b9a2db90c9f0dd3df9d7436cf23eeb2.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f5906a7263105b567163d7a8f87f5f676b9a2db90c9f0dd3df9d7436cf23eeb2.dll
Resource
win10v2004-20221111-en
General
-
Target
f5906a7263105b567163d7a8f87f5f676b9a2db90c9f0dd3df9d7436cf23eeb2
-
Size
137KB
-
MD5
8a43881b1d716a4a0b7baa2a4b73a790
-
SHA1
9c25045ffe2b1e0efa57c7be8a6a70d0bb58ca9f
-
SHA256
f5906a7263105b567163d7a8f87f5f676b9a2db90c9f0dd3df9d7436cf23eeb2
-
SHA512
291a57450b64c9c4353c9a8a42b04b8a0b59dc0ee680a5d1ed4cb6a9409db3edffa6d2f311f6d9389d87e5b1fca8133da1523495c282bbedbc128b0d4d24f4f2
-
SSDEEP
3072:BlAKC7rQ4xSdmTKVIxZSw3P43ZVjDACwpSRLauVwbdQUYh:Bl8ASCItf47P+jywsh
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
f5906a7263105b567163d7a8f87f5f676b9a2db90c9f0dd3df9d7436cf23eeb2.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 320KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 134KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 339KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 33KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ