crys
Static task
static1
Behavioral task
behavioral1
Sample
e22d5080d49b753e14078e8cd11388cb1815304542f6b3a6fe79739b5e755468.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e22d5080d49b753e14078e8cd11388cb1815304542f6b3a6fe79739b5e755468.dll
Resource
win10v2004-20221111-en
General
-
Target
e22d5080d49b753e14078e8cd11388cb1815304542f6b3a6fe79739b5e755468
-
Size
16KB
-
MD5
9fd2689733efa5deb04087bab2dd34f0
-
SHA1
b026891bad46b62242746a034bd92f30e6f886e4
-
SHA256
e22d5080d49b753e14078e8cd11388cb1815304542f6b3a6fe79739b5e755468
-
SHA512
0f13b1dcfef660591a632831705c08d7a82dac1f8804d0a997545543100be063fa46df2dc26bf275d02a052a65e2b0c1726918d6ec7dd2b61bf66c535bf08e82
-
SSDEEP
384:LtT0SWA7/GXmpUNn4iRZhAG4WvYwUmztjbRKv:JT0qmznB6rwUmRvRO
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
e22d5080d49b753e14078e8cd11388cb1815304542f6b3a6fe79739b5e755468.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
1230 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3211 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2222 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE