MyLove
Behavioral task
behavioral1
Sample
078884a167b62ba3048ad71600e1dd63.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
078884a167b62ba3048ad71600e1dd63.dll
Resource
win10v2004-20231215-en
General
-
Target
078884a167b62ba3048ad71600e1dd63
-
Size
16KB
-
MD5
078884a167b62ba3048ad71600e1dd63
-
SHA1
02464baaf2a932d409e990403d99c058cd776cf5
-
SHA256
eaa0d115999a32827386ace69df310cfe9c594e03ecc70e994740866c423838c
-
SHA512
8af66de875c44bde703248ad1fb20a802bf84a01bae7fb65b93839c0cbea435d43b961be81df852369918d741c1afa658c0d31a9c42be035ecd0f863d95677cb
-
SSDEEP
384:YZgWPl5BU/KwAamEUjXcaWCBezhnrwFF5raKDlTW:YOWN7UwPHOCoNnrwFF5r9
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 078884a167b62ba3048ad71600e1dd63
Files
-
078884a167b62ba3048ad71600e1dd63.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wlru Size: 561B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE