ClsMain
Static task
static1
Behavioral task
behavioral1
Sample
cls-mpzz.dll
Resource
win10v2004-20231215-en
General
-
Target
cls-mpzz.dll
-
Size
94KB
-
MD5
a404b1f29f69fbfcbf0ef6a92a7fe8ac
-
SHA1
177c504a934a6542e74f0cc70eafc8832d79082d
-
SHA256
da1aff62524fc3c70a7811d3ff526b2f5f3b454937e75b9400eb98da6d90e235
-
SHA512
8efcdf9eb84a3c4cba37af7207bbe9e8a179ee831449af1b2a44ba1d7796a679a1ae6acb2b12525e049e10b81be312d00e9f765c18fe1c908b43538f72cf0c4e
-
SSDEEP
1536:ZDjWQS/nZ9kwujvuNlaX6CMuYa++PGmGkUZ/hjM+0uc6lb7uwVZD2U4z+t0athzy:ZD61B9kD+aXHYa+HB10cN75ZEzx6hC/7
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cls-mpzz.dll
Files
-
cls-mpzz.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE