crys
Static task
static1
Behavioral task
behavioral1
Sample
d61025bc46b75f3e1ab1ec8d9a9288362dd8b869254c426118614e3ec2befe2c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d61025bc46b75f3e1ab1ec8d9a9288362dd8b869254c426118614e3ec2befe2c.dll
Resource
win10v2004-20220812-en
General
-
Target
d61025bc46b75f3e1ab1ec8d9a9288362dd8b869254c426118614e3ec2befe2c
-
Size
16KB
-
MD5
c7cec75cbbd0735e81834d310278d270
-
SHA1
b2df02e2b7bb7101e818c022f33530dcb9d7e09f
-
SHA256
d61025bc46b75f3e1ab1ec8d9a9288362dd8b869254c426118614e3ec2befe2c
-
SHA512
9374aceaac17909859968634b995cbc3e7136011cd2b41e7678aca7c3b021acaf94c6c9fa9ad75b77ac6c2c31553bc54c54f3fa36472835f8cca0c20f5439471
-
SSDEEP
384:LtT0SWA7/GXmpUNn4iRZhAG4WvYwUmztjbRKvn:JT0qmznB6rwUmRvRSn
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
d61025bc46b75f3e1ab1ec8d9a9288362dd8b869254c426118614e3ec2befe2c.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
1230 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3211 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2222 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE