crys
Behavioral task
behavioral1
Sample
1b04063839383f2c6f9958c0dcf6328646490f90f8b0b6420756360751ab27b5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1b04063839383f2c6f9958c0dcf6328646490f90f8b0b6420756360751ab27b5.dll
Resource
win10v2004-20220812-en
General
-
Target
1b04063839383f2c6f9958c0dcf6328646490f90f8b0b6420756360751ab27b5
-
Size
4KB
-
MD5
0f617829398988aa73d2262d12b26230
-
SHA1
783ba15addf53759e5101f8c8f2ef4fd5770004d
-
SHA256
1b04063839383f2c6f9958c0dcf6328646490f90f8b0b6420756360751ab27b5
-
SHA512
5757aed9c895416b80e2f3715f5c4b2afbc30d8296a82a4f78a7a5def024d59fbae8a06f3696b967ad44502739818bb9c2fe746da324846d2864df67fb5613fc
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+Lp1rlfYWaI2i3JNwoOlLtnHfRREXUBlYQ:TRphMzf8SWTP3JN6L1XEg8Q
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
1b04063839383f2c6f9958c0dcf6328646490f90f8b0b6420756360751ab27b5.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ