SetHandle
Static task
static1
Behavioral task
behavioral1
Sample
8f95c9ff6b71eadc7f2968112b64bf50f73e570a514052d642951a656146b9e3.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8f95c9ff6b71eadc7f2968112b64bf50f73e570a514052d642951a656146b9e3.dll
Resource
win10v2004-20240412-en
General
-
Target
8f95c9ff6b71eadc7f2968112b64bf50f73e570a514052d642951a656146b9e3
-
Size
128KB
-
MD5
7aaebf738d01ce65f01627fa193f3ccd
-
SHA1
6d7df9fbf20233ecf87ab1835db70ca269e20276
-
SHA256
8f95c9ff6b71eadc7f2968112b64bf50f73e570a514052d642951a656146b9e3
-
SHA512
51dc4070dd3a66d949fe0f105defd02f86627088f167e50dd5091f43fea925026b853ff36e0c3d7cef4628db72a3fba7e38ab2dbb5d02760cc2da64812e392b7
-
SSDEEP
3072:pE+8OKVuMxgMLQ813qgy0ExYhnMzJkt0lDMKPb:18NcMxdLQ81amJMF7eKz
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule sample UPX -
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f95c9ff6b71eadc7f2968112b64bf50f73e570a514052d642951a656146b9e3
Files
-
8f95c9ff6b71eadc7f2968112b64bf50f73e570a514052d642951a656146b9e3.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.e Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE