crys
Behavioral task
behavioral1
Sample
3667e137a33cce06d92f0413a2f6bcc22ed031658398239aacc4bad6ab7c1508.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3667e137a33cce06d92f0413a2f6bcc22ed031658398239aacc4bad6ab7c1508.dll
Resource
win10v2004-20220901-en
General
-
Target
3667e137a33cce06d92f0413a2f6bcc22ed031658398239aacc4bad6ab7c1508
-
Size
4KB
-
MD5
9156905dd66855b42170766d99902950
-
SHA1
3e266f039ea00d4d4ed9ee8dfaa41db898e984d6
-
SHA256
3667e137a33cce06d92f0413a2f6bcc22ed031658398239aacc4bad6ab7c1508
-
SHA512
3d4affaa36f48db7e09f0669cda5c48b0268071cf024fdbecdf2ee725e1bfd1fc84c06ea11746dad21d7c7b72334a939817481891437ea7eceb6ce6b21b79a78
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+LsOdF4wG/DWl0ZJMrL46Ohb0SfkFNAHW1:TRphMzf8Z2pWl0Z+rU6i0SfkFNA21
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
3667e137a33cce06d92f0413a2f6bcc22ed031658398239aacc4bad6ab7c1508.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ