crys
Behavioral task
behavioral1
Sample
3e92031c30dcbc22e172b2f8954ce5051dede9f90f0f1c42aed5a1eab49f820d.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3e92031c30dcbc22e172b2f8954ce5051dede9f90f0f1c42aed5a1eab49f820d.dll
Resource
win10v2004-20220901-en
General
-
Target
3e92031c30dcbc22e172b2f8954ce5051dede9f90f0f1c42aed5a1eab49f820d
-
Size
4KB
-
MD5
d89b6c04b668b15eb492e14bd67a0990
-
SHA1
b690ba796299a4d418b6e6b35824bddb6cd59459
-
SHA256
3e92031c30dcbc22e172b2f8954ce5051dede9f90f0f1c42aed5a1eab49f820d
-
SHA512
b3173470039ec7009483eec441002c78ba432a5c44bf7aa12488c4eda8a7ec26f6cff6475422be1f6bd997500bf4683a98cd4b6a01b31d584a82b41755827211
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+LMu2KQ+Cvwpwhc+9nN54Ix3C1FqfxHnnU:TRphMzf8Mu2ECvy+d5fx3TfxHU
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
3e92031c30dcbc22e172b2f8954ce5051dede9f90f0f1c42aed5a1eab49f820d.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ