crys
Behavioral task
behavioral1
Sample
a19f52ae4707cc586e5bb3a570b3b37fc14212b94bf3dbe938a4d8960ba8b915.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a19f52ae4707cc586e5bb3a570b3b37fc14212b94bf3dbe938a4d8960ba8b915.dll
Resource
win10v2004-20221111-en
General
-
Target
a19f52ae4707cc586e5bb3a570b3b37fc14212b94bf3dbe938a4d8960ba8b915
-
Size
4KB
-
MD5
1e64e5c9178bced6d0c994746348d080
-
SHA1
0d6b17cec58d907e10998f7ac58578d3605e459f
-
SHA256
a19f52ae4707cc586e5bb3a570b3b37fc14212b94bf3dbe938a4d8960ba8b915
-
SHA512
fe86b6d1ecfa1feac7c0e65a80cd46d2f95c170ed1fe8f9c2ee3cba8e3394f3a8d71877d2054d6c0ecc4171c30048102af1ac415f9a2800eaf586fc8a4330321
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+LMpDJw6nRlWbp1d0VYizBlrIxa3zaXdWL:TRphMzf8W+6nRMb/d0nlrYa0J+
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
a19f52ae4707cc586e5bb3a570b3b37fc14212b94bf3dbe938a4d8960ba8b915.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ