crys
Static task
static1
Behavioral task
behavioral1
Sample
f1fc573cf9f80fef0bf2c4e91755d542fcde6d261951b41660b80e9fb3d9e698.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f1fc573cf9f80fef0bf2c4e91755d542fcde6d261951b41660b80e9fb3d9e698.dll
Resource
win10v2004-20220812-en
General
-
Target
f1fc573cf9f80fef0bf2c4e91755d542fcde6d261951b41660b80e9fb3d9e698
-
Size
16KB
-
MD5
e863e374f1afa5c82194983eb7bca2d0
-
SHA1
e98321d7fa7a8a435f22cd7c95444bc9e08f36fd
-
SHA256
f1fc573cf9f80fef0bf2c4e91755d542fcde6d261951b41660b80e9fb3d9e698
-
SHA512
fe2f322d88f7397906e118c7ee06b31a20330f90a4a300031d9903e5c41fce15b205ded3d010b6bbebd733cd85b4d68796c81fe6928ee2448d3caae7e67bcf4b
-
SSDEEP
384:LtT0SWA7/GXmpUNn4iRZhAG4WvYwUmztjbRKu:JT0qmznB6rwUmRvRL
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
f1fc573cf9f80fef0bf2c4e91755d542fcde6d261951b41660b80e9fb3d9e698.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
1230 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3211 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2222 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE