crys
Static task
static1
Behavioral task
behavioral1
Sample
8838a84edc2e255ffefc9174525492db2581172284073bf74d11a5ea9fa38144.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8838a84edc2e255ffefc9174525492db2581172284073bf74d11a5ea9fa38144.dll
Resource
win10v2004-20220901-en
General
-
Target
8838a84edc2e255ffefc9174525492db2581172284073bf74d11a5ea9fa38144
-
Size
16KB
-
MD5
73643105d26641cb74cac5c9020ccf25
-
SHA1
926827325a5d5b1919a1b45ce8e63745259f9a32
-
SHA256
8838a84edc2e255ffefc9174525492db2581172284073bf74d11a5ea9fa38144
-
SHA512
ea66accd7f81b9669afef9e447e5963fa068c5f67f4d1afb6a03da8b5dd4ef3a1bfbd0ab04bf4fb1f92f53834cba66fe242a64a2682334fd9106987865833415
-
SSDEEP
384:LtT0SWA7/GXmpUNn4iRZhAG4WvYwUmztjbRKO:JT0qmznB6rwUmRvR7
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
8838a84edc2e255ffefc9174525492db2581172284073bf74d11a5ea9fa38144.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
1230 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3211 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2222 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE