MyLove
Behavioral task
behavioral1
Sample
25062ce4d237953db0760e37e2b964f745f3cc532585494ac0b0fadce1a2b358.dll
Resource
win7-20221111-en
General
-
Target
25062ce4d237953db0760e37e2b964f745f3cc532585494ac0b0fadce1a2b358
-
Size
21KB
-
MD5
f8b824a0c01079a5dff608fdd197b33c
-
SHA1
d46f5dd21b14fe9fdd99371e4603caf5e769cd07
-
SHA256
25062ce4d237953db0760e37e2b964f745f3cc532585494ac0b0fadce1a2b358
-
SHA512
81657bb4316c480a57ba2c081a83eab0f9067200ed22e1ef43ec97946dc2ef3550397302d970997ac3a17301f8f716cf60e3c2f7cba1b0370811ffb94a99983f
-
SSDEEP
384:xLWCpCJ6x37z8MxLvLW9GhOEv+fmuhx+VqC0eWPpnwDL9ADemjx5uo:dzZhFxLDW9Gc9fmuhxKqCCyL93mP
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
25062ce4d237953db0760e37e2b964f745f3cc532585494ac0b0fadce1a2b358.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vcgu Size: 638B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE