crys
Behavioral task
behavioral1
Sample
2e241ccaca9223fafeda03d1b5e2c576400625c33d298e7ff6e8251b2abe98ec.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2e241ccaca9223fafeda03d1b5e2c576400625c33d298e7ff6e8251b2abe98ec.dll
Resource
win10v2004-20220812-en
General
-
Target
2e241ccaca9223fafeda03d1b5e2c576400625c33d298e7ff6e8251b2abe98ec
-
Size
4KB
-
MD5
c2152a70259914ad1f571d2aa7053e20
-
SHA1
341cb2f2632916569d3dfd3df5675b43ea7ed335
-
SHA256
2e241ccaca9223fafeda03d1b5e2c576400625c33d298e7ff6e8251b2abe98ec
-
SHA512
7f12af856b9ec904cf3a9c15168da9767d18ebd21bc1efdb39dc0ef903cfd9b4622136e27e422f773ae49a345026ecd9e654701e995be5c97aff488095247ad8
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+LhNXnwBfUUkZJNONXFV0Vg4:TRphMzf8hNXaFkZTaVV0VB
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
2e241ccaca9223fafeda03d1b5e2c576400625c33d298e7ff6e8251b2abe98ec.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ