a
Behavioral task
behavioral1
Sample
758577933e0f6fe0c74d10b7cec9f9c4ff2569b111ed36c2f8474fe2017761ec.dll
Resource
win7-20240903-en
General
-
Target
758577933e0f6fe0c74d10b7cec9f9c4ff2569b111ed36c2f8474fe2017761ec
-
Size
352KB
-
MD5
146ad952ec40dd82d612bfbe806060ef
-
SHA1
8cbfd066b9f47d5928ef9dfd93623f5df0ee7182
-
SHA256
758577933e0f6fe0c74d10b7cec9f9c4ff2569b111ed36c2f8474fe2017761ec
-
SHA512
e6c945babafda33b80be8df4ec00511316b16977bd844a170d8eba6bcf1613dacb0ec7f86cc0163f1b3c43e0fc174cb21655eca8dba702e2c99f17309b4c7acc
-
SSDEEP
6144:pOTltR5FmYA9L9pS6yijW7Ju0Nt4X9HwBsdOd7YN919Oae411vbwcXid:putRnm5L9pXa700Nt4X9WssdMN91bekk
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 758577933e0f6fe0c74d10b7cec9f9c4ff2569b111ed36c2f8474fe2017761ec unpack001/out.upx
Files
-
758577933e0f6fe0c74d10b7cec9f9c4ff2569b111ed36c2f8474fe2017761ec.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 704KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 344KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 596KB - Virtual size: 593KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ