crys
Static task
static1
Behavioral task
behavioral1
Sample
f71c359a76406781475e7496f19a2a82f159d3afed99ea0bd614f7d66bcdbce8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f71c359a76406781475e7496f19a2a82f159d3afed99ea0bd614f7d66bcdbce8.dll
Resource
win10v2004-20220812-en
General
-
Target
f71c359a76406781475e7496f19a2a82f159d3afed99ea0bd614f7d66bcdbce8
-
Size
16KB
-
MD5
5955c6ef0fbef0efdab04a8a597a8be0
-
SHA1
4e6a6cef44fd087e3c41a7cd76e8a3137f91f9e1
-
SHA256
f71c359a76406781475e7496f19a2a82f159d3afed99ea0bd614f7d66bcdbce8
-
SHA512
bb5d64739f2684cf29ff4810d41c9f481200d08d4fcca20d1d6261251903296c2a6e81058aedf06dc7ff884ef2e2dceb7b30ea3a3a7fcec12bfc1503e5316d03
-
SSDEEP
384:LtT0SWA7/GXmpUNn4iRZhAG4WvYwUmztjbRKv:JT0qmznB6rwUmRvRK
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
f71c359a76406781475e7496f19a2a82f159d3afed99ea0bd614f7d66bcdbce8.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
1230 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3211 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2222 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE