crys
Behavioral task
behavioral1
Sample
c684eca1ce02c7a967fb18435c011774121f5956158ca1814c4db7998a0bf9d8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c684eca1ce02c7a967fb18435c011774121f5956158ca1814c4db7998a0bf9d8.dll
Resource
win10v2004-20220812-en
General
-
Target
c684eca1ce02c7a967fb18435c011774121f5956158ca1814c4db7998a0bf9d8
-
Size
4KB
-
MD5
38f42333eada714333455256ddf1920f
-
SHA1
6cdeb780f66d7b48171243e274fd5cca32fd501c
-
SHA256
c684eca1ce02c7a967fb18435c011774121f5956158ca1814c4db7998a0bf9d8
-
SHA512
f25d1285b004ecdac3d61c3673e570005b619358e14b6020a8553075f5021151cf13c59c8f65d33c7d4ef2959b45f63fba1a48e850c10381496e8a5ca300c53c
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+LUIf119zrjesWX3BdXuljmtfsCmH:TRphMzf8UIff9zrjesWhZYq94H
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
c684eca1ce02c7a967fb18435c011774121f5956158ca1814c4db7998a0bf9d8.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ