sha1hsh
Behavioral task
behavioral1
Sample
05d0a23a51967399170840e59a27b21541332691267d3ced1b6dd358076c3782.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
05d0a23a51967399170840e59a27b21541332691267d3ced1b6dd358076c3782.dll
Resource
win10v2004-20220812-en
General
-
Target
05d0a23a51967399170840e59a27b21541332691267d3ced1b6dd358076c3782
-
Size
6KB
-
MD5
c245658fed0e537a58e3eecfabd5a6d0
-
SHA1
a33503dba2468a961bea00c96ed37f5b8d2c0725
-
SHA256
05d0a23a51967399170840e59a27b21541332691267d3ced1b6dd358076c3782
-
SHA512
a7355226e03bddf00e14f337f4db42b2e025986c8526fafd1fa3c2a151104dc3a2b01e727c931ed0f7d53dd049cb3af5194d53cb04d9db915513f7111c45acac
-
SSDEEP
96:9yk/4NxpUaz88jM32Wamk6cUvhxVvBLhm+Xg8YE89lCBrZidVDDyHgZ6SIVA3:9yk/grUazhM3XRvB1ZXggcdVDYSIY
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
05d0a23a51967399170840e59a27b21541332691267d3ced1b6dd358076c3782.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 590B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ