crys
Static task
static1
Behavioral task
behavioral1
Sample
c6dfd74c548b9cc39708cf2a1ca3e79d6f9e804f477a87ad77085edb9a3628fd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6dfd74c548b9cc39708cf2a1ca3e79d6f9e804f477a87ad77085edb9a3628fd.dll
Resource
win10v2004-20221111-en
General
-
Target
c6dfd74c548b9cc39708cf2a1ca3e79d6f9e804f477a87ad77085edb9a3628fd
-
Size
16KB
-
MD5
4e78f856c4e8b1637f212cb83c6bd080
-
SHA1
a5464a2c120b2b9a2ad19662404ac31a6030cd56
-
SHA256
c6dfd74c548b9cc39708cf2a1ca3e79d6f9e804f477a87ad77085edb9a3628fd
-
SHA512
d50daf202d46a0e7cfa5ed1bfff1b481556bd7492ca5b6cb1fec352333aebd33db34b341da0dbd5023f78399c1da27644c706a42e3216e1c9ab67227983e776f
-
SSDEEP
384:LtT0SWA7/GXmpUNn4iRZhAG4WvYwUmztjbRKz:JT0qmznB6rwUmRvRK
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
c6dfd74c548b9cc39708cf2a1ca3e79d6f9e804f477a87ad77085edb9a3628fd.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
1230 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3211 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2222 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE