Behavioral task
behavioral1
Sample
8780b2fc644d86333d29411bb5daf8f54924d5ebbcdfe5757bc957279b347b91.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8780b2fc644d86333d29411bb5daf8f54924d5ebbcdfe5757bc957279b347b91.dll
Resource
win10v2004-20220812-en
General
-
Target
8780b2fc644d86333d29411bb5daf8f54924d5ebbcdfe5757bc957279b347b91
-
Size
18KB
-
MD5
5860b70fceddfb0811208c43fe2052f0
-
SHA1
dd0c4df127eee09c3ff7103be8080c104cbe124c
-
SHA256
8780b2fc644d86333d29411bb5daf8f54924d5ebbcdfe5757bc957279b347b91
-
SHA512
3fc7860708e1734a355df5e83500bd7e0865ada19eb6cacd8669dd8fc5c6395884a062afb85aef0e8483eca2a53688d7a5338c982a1ecaf37094458f7a9513a9
-
SSDEEP
384:Ec2ICG3AfmxfUrxpD6UV8Ke3PRQqLLLLLLLLLLLLLLLLLLLLTDG8s:Ec21nwc9ZxqKe3PPLLLLLLLLLLLLLLLC
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
8780b2fc644d86333d29411bb5daf8f54924d5ebbcdfe5757bc957279b347b91.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ