sebdpp
Behavioral task
behavioral1
Sample
cd2797f8c99d10409ba047e3a9e6598de0c25c85a9e563bc219d323f01898bf1.dll
Resource
win7-20220812-en
General
-
Target
cd2797f8c99d10409ba047e3a9e6598de0c25c85a9e563bc219d323f01898bf1
-
Size
22KB
-
MD5
a2d665eeb1464829c9ee9c36cf0bd845
-
SHA1
4f937bbc63e9b58bd6facd2c07283834d7b1857d
-
SHA256
cd2797f8c99d10409ba047e3a9e6598de0c25c85a9e563bc219d323f01898bf1
-
SHA512
ac2e2bc00a819e1f2c2cba0b31663dc700d1dbba4d767766d7a0e1cc195ae71ff277a74367fdbb5d6fb55f6f67b889b9d914958a2fdc5de8b7d0dae8919320b7
-
SSDEEP
384:FTVRYBcwA6o/dnv6TjKAQXL8/+s5+PHtz9qGPHwSszYWujfvSyvYwhERt/hnOkSV:FTVgATvojKBoWsYP31PHw8WBygwuRnkV
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
cd2797f8c99d10409ba047e3a9e6598de0c25c85a9e563bc219d323f01898bf1.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ