����_�����_��������
Behavioral task
behavioral1
Sample
ae5fb41a91013a118e5e600bf17496475b07b8b6626516033486b3e58baf43df.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ae5fb41a91013a118e5e600bf17496475b07b8b6626516033486b3e58baf43df.dll
Resource
win10v2004-20240508-en
General
-
Target
ae5fb41a91013a118e5e600bf17496475b07b8b6626516033486b3e58baf43df
-
Size
313KB
-
MD5
51c10c386c992fe1cbef4c9ae58b38e4
-
SHA1
2dc05ef9503f9142e28769f2ffaa481778917da7
-
SHA256
ae5fb41a91013a118e5e600bf17496475b07b8b6626516033486b3e58baf43df
-
SHA512
b2e5a862d5ff6d50defe23b2c4fea700398dd2146847833b19be0cea7b3c3c1c80f41bf4886e078f51186e4a552ecdf8bfe8d5b98e0773c9b18424722ddd55d4
-
SSDEEP
6144:ELQJcZL0+hObe19PQnmRJJKezLe6ZJmXU7lSE7qWCMLbAnROHFj8Vbn:wZLXOS1yngKyLhJmX0mAmkKbn
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource ae5fb41a91013a118e5e600bf17496475b07b8b6626516033486b3e58baf43df unpack001/out.upx
Files
-
ae5fb41a91013a118e5e600bf17496475b07b8b6626516033486b3e58baf43df.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 536KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 504KB - Virtual size: 502KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ