crys
Behavioral task
behavioral1
Sample
dd4cdf96be3abf2114da4b9c66519c797f96095b7ea9b4fcd94a34f7a5dff4f6.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dd4cdf96be3abf2114da4b9c66519c797f96095b7ea9b4fcd94a34f7a5dff4f6.dll
Resource
win10v2004-20220812-en
General
-
Target
dd4cdf96be3abf2114da4b9c66519c797f96095b7ea9b4fcd94a34f7a5dff4f6
-
Size
4KB
-
MD5
eb221eb79d1901f0da69549b5a2849a0
-
SHA1
e70600836d20e6756968f3e25036a8fd91c8cf64
-
SHA256
dd4cdf96be3abf2114da4b9c66519c797f96095b7ea9b4fcd94a34f7a5dff4f6
-
SHA512
cc94b0cd26c06bb711fc1d0554ed42644e39ddfdd1164d566d86e72d8ba31339b4be52de011c225610fea44312a465ef0d20c28035281eeddeda14bc4bba245e
-
SSDEEP
96:TRphMzf8sDrwA3HjtNVy054OvjShblfmL:NpOr8sD9ztNDJLMQL
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
dd4cdf96be3abf2114da4b9c66519c797f96095b7ea9b4fcd94a34f7a5dff4f6.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ