crys
Behavioral task
behavioral1
Sample
60600d1e34d4ea3af34b179f95237d3fde1a99f09af9e6eec3711f875bb6b357.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
60600d1e34d4ea3af34b179f95237d3fde1a99f09af9e6eec3711f875bb6b357.dll
Resource
win10v2004-20221111-en
General
-
Target
60600d1e34d4ea3af34b179f95237d3fde1a99f09af9e6eec3711f875bb6b357
-
Size
4KB
-
MD5
28d38039d41b411bafa3b7f50496c7f0
-
SHA1
644e4eea5c6b851e9a0206c47bdee4860dc0e66c
-
SHA256
60600d1e34d4ea3af34b179f95237d3fde1a99f09af9e6eec3711f875bb6b357
-
SHA512
c35f3bd56d91d715496a562a4bcbd53a68e2e219b0ab950f67db921fdeb255a41d5a22cfde2642937f1af8674cfa90924cfb456feec8ffb7839c5ca10ffd28da
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+LjFJ/jeC/D8402In4MhanT2nhF:TRphMzf8vjx/A402In4MhainL
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
60600d1e34d4ea3af34b179f95237d3fde1a99f09af9e6eec3711f875bb6b357.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ