abyz
Behavioral task
behavioral1
Sample
aacf013c04fd55fdf389d57397e451901434bd21f19158f6514904d8ff7d6929.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aacf013c04fd55fdf389d57397e451901434bd21f19158f6514904d8ff7d6929.dll
Resource
win10v2004-20221111-en
General
-
Target
aacf013c04fd55fdf389d57397e451901434bd21f19158f6514904d8ff7d6929
-
Size
12KB
-
MD5
3e634014aecd1187c3667e299b24e20e
-
SHA1
eceef2c8192212d59db580b3adc1ce3076f1b823
-
SHA256
aacf013c04fd55fdf389d57397e451901434bd21f19158f6514904d8ff7d6929
-
SHA512
6e94841d9f48150fdfb36a5b78978fad1bbae72112cc5e2aa79ee2cff3babdfe0159fff22d86093f821526d2e5aff421622409aef0e97c351e8e863dfbd06baf
-
SSDEEP
192:q8J4K40Skp/v7sK1gMNA4Aq8FBpE6QlXiLsX9TRjgSDkhaWuW:qq40SYX7z73d0m6QlXiE9TaZAWuW
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
aacf013c04fd55fdf389d57397e451901434bd21f19158f6514904d8ff7d6929.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ