utib
Behavioral task
behavioral1
Sample
762e402e78eedcb591cb97d2e0dc63ec.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
762e402e78eedcb591cb97d2e0dc63ec.dll
Resource
win10v2004-20231222-en
General
-
Target
762e402e78eedcb591cb97d2e0dc63ec
-
Size
10KB
-
MD5
762e402e78eedcb591cb97d2e0dc63ec
-
SHA1
43fed36b1e5a89572b19ba767b40d1d1be952ba6
-
SHA256
2a07f809dd1a2ccb14dbe4905405d0ef31c2d6a550dd61d3252a4633347b1c31
-
SHA512
612bf5f3c4f3b3592bab193195f4b3648e97340af73139499ef711855d0aa2c4199bd4f5eaa943ec10538add4bf224aba928c2b9b3a29475200e1e6d49daa4d0
-
SSDEEP
192:fZp7q4lTbynmtbw3MkOpaqR3IRa15NmNq8wiI1qrD6aAwwSWINW:fZNtlKnmGMbaq+Ru5NV8s1qrD6aAwTWz
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 762e402e78eedcb591cb97d2e0dc63ec unpack001/out.upx
Files
-
762e402e78eedcb591cb97d2e0dc63ec.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 369B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 886B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ