crys
Behavioral task
behavioral1
Sample
300ab12d1f6f72b6ef5488a7089227c7f15342484c4d51908d7e189601f4529c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
300ab12d1f6f72b6ef5488a7089227c7f15342484c4d51908d7e189601f4529c.dll
Resource
win10v2004-20220812-en
General
-
Target
300ab12d1f6f72b6ef5488a7089227c7f15342484c4d51908d7e189601f4529c
-
Size
3KB
-
MD5
5d5524deb6878deb81108e188609de75
-
SHA1
6557de266b2a6214f3bd716712c392a83b463e38
-
SHA256
300ab12d1f6f72b6ef5488a7089227c7f15342484c4d51908d7e189601f4529c
-
SHA512
556873dd4ab2177002923215d869b48237d1b7caaa72cc4e714253a84f8824a0f12021fcee97d9ee9f2fa46f74865454f61ce49bbdd4d99e74684413d0af15de
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
300ab12d1f6f72b6ef5488a7089227c7f15342484c4d51908d7e189601f4529c.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 557B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 485B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ