crys
Static task
static1
Behavioral task
behavioral1
Sample
ebd946ca15d581c3c2ed42189a721c21bc124a163d92ff6dc63011b6bb109be8.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ebd946ca15d581c3c2ed42189a721c21bc124a163d92ff6dc63011b6bb109be8.dll
Resource
win10v2004-20220812-en
General
-
Target
ebd946ca15d581c3c2ed42189a721c21bc124a163d92ff6dc63011b6bb109be8
-
Size
16KB
-
MD5
a548757f28c84113edd9da242d452090
-
SHA1
ca976c4305447a66431c317bb69475ed16da4e5d
-
SHA256
ebd946ca15d581c3c2ed42189a721c21bc124a163d92ff6dc63011b6bb109be8
-
SHA512
02ffcfb013d5ca0b61ab50670487606c1145dc9cdac3829a3b91a7eb59a43f07920fcbe9b233d97394fcc0dc5a13d527eda1f81cf2305e9ccf11c69d0c2f6e5f
-
SSDEEP
384:LtT0SWA7/GXmpUNn4iRZhAG4WvYwUmztjbRKQ:JT0qmznB6rwUmRvRt
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
ebd946ca15d581c3c2ed42189a721c21bc124a163d92ff6dc63011b6bb109be8.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
1230 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3211 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2222 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE