backfor
Behavioral task
behavioral1
Sample
0ae3aa22bf52f92298dfd16eb29efa954d5ac5417a8f72e67db8d0c0986e1ee5.dll
Resource
win7-20230220-en
General
-
Target
0ae3aa22bf52f92298dfd16eb29efa954d5ac5417a8f72e67db8d0c0986e1ee5
-
Size
898KB
-
MD5
e9af16008c648410aa4bf7f3e2f10e1a
-
SHA1
8aff6df6edf26e36ffdf16d299a4b9e6226ae30f
-
SHA256
0ae3aa22bf52f92298dfd16eb29efa954d5ac5417a8f72e67db8d0c0986e1ee5
-
SHA512
86aaeeb7b8442bb35d38b7069379368bc60c91a1a60f1dddac2d5dadcd640d84b3ef9a381d0912425da2f2dfaa6f06d10062459e7bdd8e2c6c4445012a3d3257
-
SSDEEP
24576:7Y0llgKPnRvR+UacLbCM/yM/hG6Dv/alUOE5ePFkk2aYy:TyKnRARcLL5/hBv/alUkdF1
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
0ae3aa22bf52f92298dfd16eb29efa954d5ac5417a8f72e67db8d0c0986e1ee5.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 829KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ