da1df1fa552f
Behavioral task
behavioral1
Sample
7623511d9fcd684fae71f056eb63d087.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7623511d9fcd684fae71f056eb63d087.dll
Resource
win10v2004-20231222-en
General
-
Target
7623511d9fcd684fae71f056eb63d087
-
Size
13KB
-
MD5
7623511d9fcd684fae71f056eb63d087
-
SHA1
653969d4a0f4bc0bdcc60139f59dc55a5d3d4974
-
SHA256
44431e10f5a893eb770033d7b2cd3b2ec6dbae2f45a216c324115d2e0a1493ed
-
SHA512
22288cdd110d560d2b8e3377ae9f642a355926ac260e4779f669463c6be7ca67405a7bcc4a9dd14c74ba1d27fae07628fabb5c25c9585f964e3c5b86c5392215
-
SSDEEP
384:BOa6v9H4iKxi/R4JND+lgLiBBGyylf3gI+:BOr9Yl7DtmBBGyyZgI+
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 7623511d9fcd684fae71f056eb63d087 unpack001/out.upx
Files
-
7623511d9fcd684fae71f056eb63d087.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ