crys
Behavioral task
behavioral1
Sample
55751cea6fbd2623637eba5018c70bd87125b249f6f40a0167ee52d9e0956798.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
55751cea6fbd2623637eba5018c70bd87125b249f6f40a0167ee52d9e0956798.dll
Resource
win10v2004-20221111-en
General
-
Target
55751cea6fbd2623637eba5018c70bd87125b249f6f40a0167ee52d9e0956798
-
Size
4KB
-
MD5
25e33ab4c772a9299f346030487060e0
-
SHA1
638884dfc98d65502225fdf8f170e7b998ae1027
-
SHA256
55751cea6fbd2623637eba5018c70bd87125b249f6f40a0167ee52d9e0956798
-
SHA512
3348891fc2f05c05303e63e116004f76934fa6a9f0cc54dee63bd92cba56f7d87fa4d8bd38603ffc338935b1e762d38777f1bfb7806e118aa47eb01068e467a9
-
SSDEEP
96:TRphMzf8pN4kImtLtg3SMmb6GeB1cSatgG:NpOr8pqrmZtkGeUjp
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
55751cea6fbd2623637eba5018c70bd87125b249f6f40a0167ee52d9e0956798.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ