StartMC
Behavioral task
behavioral1
Sample
2c7765828a4461e0823e6bc548aea6716d049dfcfedda3cfd48f9014fedf6541.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2c7765828a4461e0823e6bc548aea6716d049dfcfedda3cfd48f9014fedf6541.dll
Resource
win10v2004-20221111-en
General
-
Target
2c7765828a4461e0823e6bc548aea6716d049dfcfedda3cfd48f9014fedf6541
-
Size
247KB
-
MD5
325dc4277b07aebb77de3814ea8232b0
-
SHA1
b4bf927c5fc412c2d8478a6edbd035d46bd47157
-
SHA256
2c7765828a4461e0823e6bc548aea6716d049dfcfedda3cfd48f9014fedf6541
-
SHA512
1f15a4dfb41b8507f463da12d8a705be682d7185b1bf541d8dc81f8a1eb2d8355ff3e3692c474a24b62564aa03f8584651301f54b7cd705a9123882f9dbd9781
-
SSDEEP
6144:BErH8lVwEarHXL0npVvlvdvxxzdto75OOPXNeggw/1xChZ:Bvl8opFlvdDdto75OMNlL9xC/
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
2c7765828a4461e0823e6bc548aea6716d049dfcfedda3cfd48f9014fedf6541.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 542KB - Virtual size: 541KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ