crys
Behavioral task
behavioral1
Sample
b95f3c92ead06cbbe1cc5c5323c2e9745a33790358dadce35a2a91f25c52fc8d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b95f3c92ead06cbbe1cc5c5323c2e9745a33790358dadce35a2a91f25c52fc8d.dll
Resource
win10v2004-20221111-en
General
-
Target
b95f3c92ead06cbbe1cc5c5323c2e9745a33790358dadce35a2a91f25c52fc8d
-
Size
3KB
-
MD5
f71b0d46c9d42dc1b19ce6a7446579f0
-
SHA1
c451e38a6bacacbebbbf88796cb3735a3cf75a2e
-
SHA256
b95f3c92ead06cbbe1cc5c5323c2e9745a33790358dadce35a2a91f25c52fc8d
-
SHA512
f6f50d168684ab4fb4a8b52299260f1446405ae6d32bfd5e40c3ffedb17d2ee089c8e85fdbe96a4afe62737e7ee4a8f4c6811f5c5a0239a9eb44e5e75dce9d23
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
b95f3c92ead06cbbe1cc5c5323c2e9745a33790358dadce35a2a91f25c52fc8d.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ