MyLove
Behavioral task
behavioral1
Sample
a7d1dfbce091ef66867bd82542bd5a7723530f1fd6b2f4956346be5923d53f4d.dll
Resource
win7-20220812-en
General
-
Target
a7d1dfbce091ef66867bd82542bd5a7723530f1fd6b2f4956346be5923d53f4d
-
Size
21KB
-
MD5
ba16c693bd722880f3dfea5977c556cb
-
SHA1
045fbcb69fd93ac983fa6ef906caef50a7c9ffa0
-
SHA256
a7d1dfbce091ef66867bd82542bd5a7723530f1fd6b2f4956346be5923d53f4d
-
SHA512
16bc1e9fcb5fbc28eda955bc247d254c7a901c1e2e6454ddcf329f4f2f8b82cb8ccc8adc9333cec7c85778d18e088bf84aeaa997aae750a912321648588f2ce5
-
SSDEEP
384:zTDLepAUnLhpDu+OqzA63ntWEtLNHmCpsNsaxfs5sIi0tbOCo:Pep/L3unq0ctJhmxkyGtbO
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
a7d1dfbce091ef66867bd82542bd5a7723530f1fd6b2f4956346be5923d53f4d.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wdtp Size: 559B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE