crys
Static task
static1
Behavioral task
behavioral1
Sample
091e7e9bb9bf27e2517bcaa8519f334a2ecf06c51dcaa979e136f79a4e03b359.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
091e7e9bb9bf27e2517bcaa8519f334a2ecf06c51dcaa979e136f79a4e03b359.dll
Resource
win10v2004-20220812-en
General
-
Target
091e7e9bb9bf27e2517bcaa8519f334a2ecf06c51dcaa979e136f79a4e03b359
-
Size
16KB
-
MD5
6cf76e28013c54746697f5548ddc793f
-
SHA1
0fb444a11de23d0a6b88ea4fc77213add031056a
-
SHA256
091e7e9bb9bf27e2517bcaa8519f334a2ecf06c51dcaa979e136f79a4e03b359
-
SHA512
eb3b56658675de2e85c0f041c8fe6a0e56fa731bf571206ece1623e4195cfaf844fe667a638964b8e614afeb301e696850c2dba9936345d0d56d101764e19d51
-
SSDEEP
384:LtT0SWA7/GXmpUNn4iRZhAG4WvYwUmztjbRKm:JT0qmznB6rwUmRvRX
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
091e7e9bb9bf27e2517bcaa8519f334a2ecf06c51dcaa979e136f79a4e03b359.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
1230 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3211 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2222 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE