DLL�ӿ�
Behavioral task
behavioral1
Sample
23d2aa56931551ba013c0638e728b908f65bbc23140f59fc6c0d098c597e3e15.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
23d2aa56931551ba013c0638e728b908f65bbc23140f59fc6c0d098c597e3e15.dll
Resource
win10v2004-20231020-en
General
-
Target
23d2aa56931551ba013c0638e728b908f65bbc23140f59fc6c0d098c597e3e15
-
Size
456KB
-
MD5
8b1a823daf924391fa5e98b23adfbeff
-
SHA1
9e9052291bdb83bd1679c498e50e4c8759164f6e
-
SHA256
23d2aa56931551ba013c0638e728b908f65bbc23140f59fc6c0d098c597e3e15
-
SHA512
4bbe7fcc4d674e1170d51037142f500d63c85cc6a8c6a58bf70170e68e77f5533dee0c375fb5b49ba45dca37a4752761ec112c43fc1f3468ff49bef81575766b
-
SSDEEP
12288:QBy80Z6aiVKbRt96nnPYCTTBUvam92eml1hRpYZUD3NUEAtMJNOqoS:A0Z6qbRwPYU6am9dk19fDdUEhJNO
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23d2aa56931551ba013c0638e728b908f65bbc23140f59fc6c0d098c597e3e15
Files
-
23d2aa56931551ba013c0638e728b908f65bbc23140f59fc6c0d098c597e3e15.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 446KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE