___CPPdebugHook
Behavioral task
behavioral1
Sample
231f0db625e6b2eed342d323ddf566e7.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
231f0db625e6b2eed342d323ddf566e7.dll
Resource
win10v2004-20231215-en
General
-
Target
231f0db625e6b2eed342d323ddf566e7
-
Size
249KB
-
MD5
231f0db625e6b2eed342d323ddf566e7
-
SHA1
2d80bbe3937aafe340ae2e52cc4f024eee523db9
-
SHA256
cf2d5877a9550866cf653c6041181ddbff552246f73b47dba2ca42c2037c9c2d
-
SHA512
fcd227700ccd82b133fbe2a26deb048523de3405f89cff1e655e8e4b653cc3c153a0f4a2d06cbc6e82a00344b73b298d2ff1ef38c04a426f85127db71a6cdf81
-
SSDEEP
6144:xq1LLJh8G4Ztffoycg8bQoRhYTXnyO3Qz/2yczRmzDOb:xq1fJuBZFCp8z/3Q/lrzCb
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 231f0db625e6b2eed342d323ddf566e7
Files
-
231f0db625e6b2eed342d323ddf566e7.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 246KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE