crys
Behavioral task
behavioral1
Sample
bb629fae85edf4f8739f4104417cc6d7013b6cc0c1fb933f58bed2f3a7a2a0e1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb629fae85edf4f8739f4104417cc6d7013b6cc0c1fb933f58bed2f3a7a2a0e1.dll
Resource
win10v2004-20220812-en
General
-
Target
bb629fae85edf4f8739f4104417cc6d7013b6cc0c1fb933f58bed2f3a7a2a0e1
-
Size
4KB
-
MD5
63964b54584740f389dafe0b20f51930
-
SHA1
13c47c48953ad02fc7c86f101830c7f2602832c4
-
SHA256
bb629fae85edf4f8739f4104417cc6d7013b6cc0c1fb933f58bed2f3a7a2a0e1
-
SHA512
e33cc0fabf0e37f0bdcf58b7555c482d37209b86fa2f442a012470c2521a6d9c3749d7850dd1145c001d768519c5a9c92a0eddf0cd4de401cb944732f910913d
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+LKfTLUEUS+Y4t/HKtmnKl7VlnhV81/ByN:TRphMzf8U3/+aMnY7Vlnrw/Bv3kLS+M8
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
bb629fae85edf4f8739f4104417cc6d7013b6cc0c1fb933f58bed2f3a7a2a0e1.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ