Behavioral task
behavioral1
Sample
983e7751a33465fcd96fa924284c9f76.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
983e7751a33465fcd96fa924284c9f76.dll
Resource
win10v2004-20231215-en
General
-
Target
983e7751a33465fcd96fa924284c9f76
-
Size
30KB
-
MD5
983e7751a33465fcd96fa924284c9f76
-
SHA1
34d8a724d4d97c630357c36b0a1f29f43c38420c
-
SHA256
dd7deac47d4bd2fd356b22b94a7b36928d3a07fd3cf4174a9902d10cd7ac257d
-
SHA512
1b63e978b57a2a44d792e333d662dcb74116034e9f8ff9ca0211c72282efe91077276f357dfc1d999c6bbf0ae037d1377aff203f96f8dad4c1f28ba7a7e3b095
-
SSDEEP
768:cmmvqo5+PXHvy2k6gdkTx/rt7MRnwELuVsvrrwO700qOS:cmmqoWy2nec/rlGyVorTgjO
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 983e7751a33465fcd96fa924284c9f76 unpack001/out.upx
Files
-
983e7751a33465fcd96fa924284c9f76.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ