crys
Behavioral task
behavioral1
Sample
6b4bc51f4641d7d4cb67fa7b8958050f386a1a6495ddb105c3cb7e9862d9e41b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b4bc51f4641d7d4cb67fa7b8958050f386a1a6495ddb105c3cb7e9862d9e41b.dll
Resource
win10v2004-20220901-en
General
-
Target
6b4bc51f4641d7d4cb67fa7b8958050f386a1a6495ddb105c3cb7e9862d9e41b
-
Size
4KB
-
MD5
3a043311915cd29f1dd54dbe24819250
-
SHA1
9581dce15e8c621ed420ed20b5b68cb4f5891736
-
SHA256
6b4bc51f4641d7d4cb67fa7b8958050f386a1a6495ddb105c3cb7e9862d9e41b
-
SHA512
6e6c51c9e90f2d4dce2e70e0fe69c647d785d5c1a1fba6a5da784fe6eae9cd63d726a4eec263fc6820bf80453727f4be4fd8f803ffe5f58b500a3f524a4de901
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+LTQIbhz8DNDL5yzezleYYSDvKyQQwa511:TRphMzf8T8DN/8zecYYSjKVQZnXjRvbH
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
6b4bc51f4641d7d4cb67fa7b8958050f386a1a6495ddb105c3cb7e9862d9e41b.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ