crys
Behavioral task
behavioral1
Sample
738cbd86f7f05158946a4d97a77a7df7d2bc9e679d2865556bbecc24fe1a8f89.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
738cbd86f7f05158946a4d97a77a7df7d2bc9e679d2865556bbecc24fe1a8f89.dll
Resource
win10v2004-20220812-en
General
-
Target
738cbd86f7f05158946a4d97a77a7df7d2bc9e679d2865556bbecc24fe1a8f89
-
Size
3KB
-
MD5
4d26b4f288a088587801e087ae615ab0
-
SHA1
4c887e1568f5822260cac457f32f7f1733f582fe
-
SHA256
738cbd86f7f05158946a4d97a77a7df7d2bc9e679d2865556bbecc24fe1a8f89
-
SHA512
8a76264b97c30e11e3be1a8ecfd6b40aed4b2b64637f2d5b0e8d2b53da66a2455343e35f8962773d699cd753fe7c4be086550223c3e151ac769a4e072d8c7b19
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
738cbd86f7f05158946a4d97a77a7df7d2bc9e679d2865556bbecc24fe1a8f89.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ