crys
Behavioral task
behavioral1
Sample
77d27608975b9ba2d4d36b906c793b1148195918b887119cdf8e13181ce87993.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
77d27608975b9ba2d4d36b906c793b1148195918b887119cdf8e13181ce87993.dll
Resource
win10v2004-20220812-en
General
-
Target
77d27608975b9ba2d4d36b906c793b1148195918b887119cdf8e13181ce87993
-
Size
4KB
-
MD5
ca209b35d0cf50c6c18ef2a370e590f0
-
SHA1
84fb546ccb60f63e5e9af7a8820f699a0226fc29
-
SHA256
77d27608975b9ba2d4d36b906c793b1148195918b887119cdf8e13181ce87993
-
SHA512
15ba4b63cb36af16c2fd9e45368f67856d26b3127bede7f57f38b1e2176f9ffa0e76342ca89291e84d32de775e8333ce7ef658e5a948816c490195a9ac828d56
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+LuTZvjhhs0f3faUtfLMgFL6k5H2UX2o4S:TRphMzf8uTZzrv/d5WUj4D1py
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
77d27608975b9ba2d4d36b906c793b1148195918b887119cdf8e13181ce87993.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ