crys
Behavioral task
behavioral1
Sample
70b692c4134e3e49bdb0104c4d35c10e9cb2459a4f5438754dd0a5e4f0f54b84.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
70b692c4134e3e49bdb0104c4d35c10e9cb2459a4f5438754dd0a5e4f0f54b84.dll
Resource
win10v2004-20220812-en
General
-
Target
70b692c4134e3e49bdb0104c4d35c10e9cb2459a4f5438754dd0a5e4f0f54b84
-
Size
4KB
-
MD5
035d96cc42d2f77e4b1264bd2c5642e0
-
SHA1
73b61734850b6e5dc9af0a70c2515a50cbcf3738
-
SHA256
70b692c4134e3e49bdb0104c4d35c10e9cb2459a4f5438754dd0a5e4f0f54b84
-
SHA512
4074ca5eb09c7b4d0ed5ef5b834428c8f2828cb91dd871e7cdf8b2e788ac7554670f1be69801a0934cb5492103e63693f525e881f9ae8e5629539624d64fd658
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+L4FHKmvNUdSGoqK5dmzsnZUmK:TRphMzf8Evud3LInZe
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
70b692c4134e3e49bdb0104c4d35c10e9cb2459a4f5438754dd0a5e4f0f54b84.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ