361f14dbcce6354d1299a8d7d6ac0fa8

General

Target

361f14dbcce6354d1299a8d7d6ac0fa8
Size

141KB
MD5

361f14dbcce6354d1299a8d7d6ac0fa8
SHA1

3e8c6973000172ad5d04f7ffa748e81726fa3850
SHA256

4dba19e3fbdb73ed01633b1068d1a476f39d24fadee949b7a315daa984655156
SHA512

001fd0106f4600b966949ff21b5bfb35f05f74fb02439b6fd4e9731a71d3b50a3f38ae5db3e2715c721a33869e575b7e86bfeb9fe43f368688472c0cf7f26666
SSDEEP

3072:NcpLnOPYuvjrC71ivp7ztK560Su2R9mYRben6AeNk7Apc7xojV:NctOAurS1ivpX0S3eebs6RKMcWjV

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
361f14dbcce6354d1299a8d7d6ac0fa8

Files

361f14dbcce6354d1299a8d7d6ac0fa8
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CallBuyNowURL
CallBuyNowURLEx
CallCustomerServiceURL
ChangeHardwareLock
CheckCode
ConnectedToServer
CopiesRunning
DllRegisterServer
DllUnregisterServer
Environ
ExpireCurrentKey
FixClock
GetShellProcessID
GetUserString
IncrementCounter
InstallKey
InstallKeyLater
NANOBEGIN
NANOEND
RawFingerprintInfo
SECUREBEGIN
SECUREBEGIN_A
SECUREBEGIN_B
SECUREBEGIN_C
SECUREBEGIN_D
SECUREBEGIN_E
SECUREBEGIN_F
SECUREBEGIN_G
SECUREBEGIN_H
SECUREBEGIN_I
SECUREBEGIN_J
SECUREBEGIN_K
SECUREEND
SECUREEND_A
SECUREEND_B
SECUREEND_C
SECUREEND_D
SECUREEND_E
SECUREEND_F
SECUREEND_G
SECUREEND_H
SECUREEND_I
SECUREEND_J
SECUREEND_K
SetDefaultKey
SetUserString
ShowEnterKeyDialog
ShowReminderMessage
ShowReminderMessage2
UninstallKey
UpdateEnvironment
VBGetCommandLine
VBGetUserString
VerifyKey
WriteHardwareChangeLog
_GetCommandLine

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 44KB

UPX1 Size: 14KB - Virtual size: 16KB

.rsrc Size: 2KB - Virtual size: 4KB

.text Size: 123KB - Virtual size: 124KB

UPX0
Size: - Virtual size: 44KB

UPX1
Size: 14KB - Virtual size: 16KB

.rsrc
Size: 2KB - Virtual size: 4KB

.text
Size: 123KB - Virtual size: 124KB