crys
Behavioral task
behavioral1
Sample
35a05088e3a4ae88680208c6104b8b8446bd9eceaf74d1b5c8e7117e3aa7e3f0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
35a05088e3a4ae88680208c6104b8b8446bd9eceaf74d1b5c8e7117e3aa7e3f0.dll
Resource
win10v2004-20220812-en
General
-
Target
35a05088e3a4ae88680208c6104b8b8446bd9eceaf74d1b5c8e7117e3aa7e3f0
-
Size
3KB
-
MD5
8afaeda3a410235287b1d321c7156b00
-
SHA1
0515c192325959a3214492a7590386980345b379
-
SHA256
35a05088e3a4ae88680208c6104b8b8446bd9eceaf74d1b5c8e7117e3aa7e3f0
-
SHA512
9199e47906c88bf1a2f6755f20f6f060d0681264254fd88bdf8518a65b18dd9dfeef0c763ef102d49f6c8e9c329f0a18267af833cdcf1ddbaba9870bd93cf2db
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
35a05088e3a4ae88680208c6104b8b8446bd9eceaf74d1b5c8e7117e3aa7e3f0.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ