RunDllHostCallBack
Behavioral task
behavioral1
Sample
2518baedce9af64a29e8ab2ec24429d90aac1e9a2f29ea50dbe71ab2e6813eab.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2518baedce9af64a29e8ab2ec24429d90aac1e9a2f29ea50dbe71ab2e6813eab.dll
Resource
win10v2004-20230915-en
General
-
Target
2518baedce9af64a29e8ab2ec24429d90aac1e9a2f29ea50dbe71ab2e6813eab
-
Size
777KB
-
MD5
179a8f7d6bea299c26b1cc536f492d1e
-
SHA1
a441b4b3b159b82efc76aa7b5816cca860f5f0ba
-
SHA256
2518baedce9af64a29e8ab2ec24429d90aac1e9a2f29ea50dbe71ab2e6813eab
-
SHA512
6109df54511f8ebf5dabcae878e85626f5054fc851577c391df4a208f2d3944676edb3cd17edc0c88a65e821e671267501cf6c1c9a453def928df57ed70e6157
-
SSDEEP
12288:ur1cpGyNqnl8EIjCw6AII0Tx5PA7shUM7kHYRZVUzAQlCy5IIaGuTZqLmyWWb5oQ:4cQyNcI0d53hkHYRZVUzAKQfTcTN
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2518baedce9af64a29e8ab2ec24429d90aac1e9a2f29ea50dbe71ab2e6813eab
Files
-
2518baedce9af64a29e8ab2ec24429d90aac1e9a2f29ea50dbe71ab2e6813eab.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 767KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE