crys
Behavioral task
behavioral1
Sample
b518ca2ae2b0713dd599956bc41644a99c7e17e0b1cda2ae5ee4dd5e63dc596c.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b518ca2ae2b0713dd599956bc41644a99c7e17e0b1cda2ae5ee4dd5e63dc596c.dll
Resource
win10v2004-20221111-en
General
-
Target
b518ca2ae2b0713dd599956bc41644a99c7e17e0b1cda2ae5ee4dd5e63dc596c
-
Size
3KB
-
MD5
adf1079a487a4813dfd0d16ede25a9b0
-
SHA1
3c0e84393ff26c194da959bf7b173c6c5119bc28
-
SHA256
b518ca2ae2b0713dd599956bc41644a99c7e17e0b1cda2ae5ee4dd5e63dc596c
-
SHA512
e789835fcde1c1b9b513ca959923d4476866a8d63963574b4182cdf8619607521241ee3c6649aae5db0b79111b8f4096292d0ffe93cfd2619335f485638b4248
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
b518ca2ae2b0713dd599956bc41644a99c7e17e0b1cda2ae5ee4dd5e63dc596c.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ