Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Symmi.18751.21036.11548.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Symmi.18751.21036.11548.dll
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Variant.Symmi.18751.21036.11548.dll
-
Size
30KB
-
MD5
54a96d051aa03a90ba34fe5060af5d9e
-
SHA1
bb4e22c19e6d7250f95ac9deee1c5078a4753159
-
SHA256
22aa4b074eee9c6354f9500f4354c558195b073972cbcf60a3674d3abd6e779e
-
SHA512
486240ecfe1509e5a4584d5a172b8066a53bcd0088ac714795937aac55fae936282fe65b3ce65daa33e94f682f803c235a8e93717596a3892c44a932f889efa8
-
SSDEEP
768:xXbYqkr4x1Sk4vBn+egK6S4qCrFTKN40s82RTu:xLxkEx1/e5OphDx9u
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Variant.Symmi.18751.21036.11548.dll unpack001/out.upx
Files
-
SecuriteInfo.com.Variant.Symmi.18751.21036.11548.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 540B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ