intprt32[.]dll[.]ensilo[.]dll

General

Target

intprt32.dll.ensilo.dll
Size

2.0MB
MD5

8155c5a17fea4c2be7e45de8dc62bed0
SHA1

826d4e76165b81b681c9715512343818d7468df9
SHA256

e92678640a980eb954d5fda64135de930bc582bc8e47baa5efeb6e9d2b51fd7a
SHA512

08be35fbcadb17410f30433263f4324f7baa0a5c9456a63fd5b139830106450b48b95d68eddd1128d64d71fce52be44968f0579d9430c0d7bbe0a7b0722e3771
SSDEEP

49152:Sc8lr3UbGsIoAYBV3/66bD12ZTsQszwDVxRH2kA0mggJ/:Sc6GfAK9SoD1ogTz8VxBPA0qZ

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
intprt32.dll.ensilo.dll
unpack001/out.upx

Files

intprt32.dll.ensilo.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Run
SendData
SendFields
SendGlobalData

Sections

UPX0
Size: - Virtual size: 5.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 32KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 5.3MB

UPX1 Size: 2.0MB - Virtual size: 2.0MB

.rsrc Size: 47KB - Virtual size: 48KB

Headers

File Characteristics

Sections

.text Size: 4.5MB - Virtual size: 4.5MB

.itext Size: 20KB - Virtual size: 19KB

.data Size: 81KB - Virtual size: 80KB

.bss Size: - Virtual size: 32KB

.idata Size: 18KB - Virtual size: 18KB

.didata Size: 1024B - Virtual size: 934B

.edata Size: 512B - Virtual size: 132B

.reloc Size: 372KB - Virtual size: 371KB

.rsrc Size: 2.1MB - Virtual size: 2.1MB

UPX0
Size: - Virtual size: 5.3MB

UPX1
Size: 2.0MB - Virtual size: 2.0MB

.rsrc
Size: 47KB - Virtual size: 48KB

.text
Size: 4.5MB - Virtual size: 4.5MB

.itext
Size: 20KB - Virtual size: 19KB

.data
Size: 81KB - Virtual size: 80KB

.bss
Size: - Virtual size: 32KB

.idata
Size: 18KB - Virtual size: 18KB

.didata
Size: 1024B - Virtual size: 934B

.edata
Size: 512B - Virtual size: 132B

.reloc
Size: 372KB - Virtual size: 371KB

.rsrc
Size: 2.1MB - Virtual size: 2.1MB