Behavioral task
behavioral1
Sample
93eb957f669cd3f3a14ab106886e0ac85a62eced643ffa85a0f7ba1b86ea2c2d.dll
Resource
win7-20240708-en
General
-
Target
93eb957f669cd3f3a14ab106886e0ac85a62eced643ffa85a0f7ba1b86ea2c2d
-
Size
113KB
-
MD5
15622b8cfb9aa8824077998b1250f115
-
SHA1
0dbced9c1684c98295faba4c27579912debed22f
-
SHA256
93eb957f669cd3f3a14ab106886e0ac85a62eced643ffa85a0f7ba1b86ea2c2d
-
SHA512
9bd01f8f846e4c4bbe503f6355abf6316277dbdbac08ec268944e5b999e7e12761f7931bf1d02758948ca0f8993d0e74777f72e04589297d6bd75f4136b07740
-
SSDEEP
3072:ByuMbaHHGC/rLDFMwE41gS7O0LX/ePVu+:ByubHG6LBMQ1ppS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 93eb957f669cd3f3a14ab106886e0ac85a62eced643ffa85a0f7ba1b86ea2c2d unpack001/out.upx
Files
-
93eb957f669cd3f3a14ab106886e0ac85a62eced643ffa85a0f7ba1b86ea2c2d.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 254KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ