SecuriteInfo[.]com[.]Trojan[.]Win32[.]Crypt[.]20613[.]31412[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Win32.Crypt.20613.31412.dll
Size

3.9MB
MD5

d837ad36634f190e8a37e7b17c341c3d
SHA1

d0853ee54798dcee40b4223fc41440c99244a490
SHA256

0a9c770384a3a710cf9702df2a5329c7670f5b0efdd2ae425c5d48f48cccc414
SHA512

3e3b40efa86fe5ac576f93e94f8130bce2fd5a999284d57c65ce2948c700f3a382acae2f811c6c55f7c49796c2bfdd27c38da336c9acb20950fceec95d0b421c
SSDEEP

98304:A5zO23temH6pKItvYw7C5bL3brTKdSofQb3zljP:+O23z61ZSH3bFo4DN

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Win32.Crypt.20613.31412.dll
unpack001/out.upx

Files

SecuriteInfo.com.Trojan.Win32.Crypt.20613.31412.dll
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

AddCertPoolPath
AddCertPoolText
AddClientAuth
AddHttpCertificate
BrCompress
BrUnCompress
BrotliCompress
BytesToInt
CompileProxyRegexp
CreateCA
CreateCertificate
CreateHTTPClient
CreateKeys
CreateQueue
CreateRedis
CreateSocketClient
CreateSunnyNet
CreateWebsocket
DeflateCompress
DeflateUnCompress
DelHttpCertificate
DelRequestHeader
DelResponseHeader
ExportCA
ExportCert
ExportKEY
ExportP12
ExportPub
GetCommonName
GetRequestALLCookie
GetRequestAllHeader
GetRequestBody
GetRequestBodyLen
GetRequestClientIp
GetRequestCookie
GetRequestHeader
GetResponseAllHeader
GetResponseBody
GetResponseBodyLen
GetResponseHeader
GetResponseStatus
GetResponseStatusCode
GetServerName
GetWebsocketBody
GetWebsocketBodyLen
GoCall
GzipCompress
GzipUnCompress
HTTPClientGetErr
HTTPGetBody
HTTPGetBodyLen
HTTPGetCode
HTTPGetHeads
HTTPOpen
HTTPSendBin
HTTPSetCertManager
HTTPSetHeader
HTTPSetProxyIP
HTTPSetRedirect
HTTPSetTimeouts
HexDump
JsonToPB
KeysDelete
KeysEmpty
KeysGetCount
KeysGetJson
KeysRead
KeysReadFloat
KeysReadInt
KeysReadLong
KeysWrite
KeysWriteFloat
KeysWriteInt
KeysWriteLong
KeysWriteStr
LoadP12Certificate
LoadX509Certificate
LoadX509KeyPair
MakeChan
PbToJson
ProcessALLName
ProcessAddName
ProcessAddPid
ProcessCancelAll
ProcessDelName
ProcessDelPid
QueueIsEmpty
QueueLength
QueuePull
QueuePush
QueueRelease
RedisClose
RedisDelete
RedisDial
RedisDo
RedisExists
RedisFlushAll
RedisFlushDB
RedisGetBytes
RedisGetInt
RedisGetKeys
RedisGetStr
RedisSet
RedisSetBytes
RedisSetNx
RedisSubscribe
ReleaseSunnyNet
RemoveCertificate
RemoveHTTPClient
RemoveKeys
RemoveRedis
RemoveSocketClient
RemoveWebsocket
ScriptCall
SendWebsocketBody
SetGlobalProxy
SetIeProxy
SetInsecureSkipVerify
SetRequestAllCookie
SetRequestCookie
SetRequestData
SetRequestHeader
SetRequestOutTime
SetRequestProxy
SetRequestUrl
SetResponseAllHeader
SetResponseData
SetResponseHeader
SetResponseStatus
SetScript
SetScriptLogCallAddress
SetServerName
SetTcpAgent
SetTcpBody
SetTcpConnectionIP
SetWebsocketBody
SocketClientClose
SocketClientDial
SocketClientGetErr
SocketClientReceive
SocketClientSetBufferSize
SocketClientWrite
StartProcess
SunnyNetClose
SunnyNetError
SunnyNetInstallCert
SunnyNetMustTcp
SunnyNetSetCallback
SunnyNetSetCert
SunnyNetSetPort
SunnyNetSocket5AddUser
SunnyNetSocket5DelUser
SunnyNetStart
SunnyNetVerifyUser
TcpCloseClient
TcpSendMsg
TcpSendMsgClient
WebpToJpeg
WebpToJpegBytes
WebpToPng
WebpToPngBytes
WebsocketClientReceive
WebsocketClose
WebsocketDial
WebsocketGetErr
WebsocketReadWrite
ZlibCompress
ZlibUnCompress
_cgo_dummy_export
go_tcpCanReceive
go_tcpCanSend
go_tcpClosed
go_tcpConnectRequest
go_tcpConnected
go_tcpReceive
go_tcpSend
go_threadEnd
go_threadStart
go_udpCanReceive
go_udpCanSend
go_udpClosed
go_udpConnectRequest
go_udpCreated
go_udpReceive
go_udpSend

Sections

UPX0
Size: - Virtual size: 8.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 233KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 8.2MB

UPX1 Size: 3.9MB - Virtual size: 3.9MB

UPX2 Size: 5KB - Virtual size: 8KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 5.3MB - Virtual size: 5.3MB

.data Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 4.8MB - Virtual size: 4.8MB

.bss Size: - Virtual size: 233KB

.edata Size: 5KB - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 229KB - Virtual size: 229KB

UPX0
Size: - Virtual size: 8.2MB

UPX1
Size: 3.9MB - Virtual size: 3.9MB

UPX2
Size: 5KB - Virtual size: 8KB

.text
Size: 5.3MB - Virtual size: 5.3MB

.data
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 4.8MB - Virtual size: 4.8MB

.bss
Size: - Virtual size: 233KB

.edata
Size: 5KB - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 229KB - Virtual size: 229KB