RunDllHostCallBack
Behavioral task
behavioral1
Sample
3600e9fc64757cf482826892452f9b2924a568c455b9e8329ded1403a3aa34fa.dll
Resource
win7-20240903-en
General
-
Target
3600e9fc64757cf482826892452f9b2924a568c455b9e8329ded1403a3aa34fa
-
Size
658KB
-
MD5
dc5ed3a01e3e060990f691e136fbc7d5
-
SHA1
1665bea864d54656b8bcea00ef594ff787ab1121
-
SHA256
3600e9fc64757cf482826892452f9b2924a568c455b9e8329ded1403a3aa34fa
-
SHA512
e1fe0c8cacd115f4dbb39248afd2f233e63772f4d0a0a230db6e49ed45ec337d74316c20aebb144f243a87ac3ff10f5420d7de44781467a503268af88e86d95d
-
SSDEEP
12288:QIHmbZLYAL0qIc7N2znr0HGNI/JmiOOEp3MGfG7n37hwoml+6BZwJXeboSAu:QIGaALAkEdNImiu3A37hwomBBKde
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3600e9fc64757cf482826892452f9b2924a568c455b9e8329ded1403a3aa34fa
Files
-
3600e9fc64757cf482826892452f9b2924a568c455b9e8329ded1403a3aa34fa.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 622KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE