crys
Static task
static1
Behavioral task
behavioral1
Sample
721a120c345f44e4b7f57eb16ec4effe64c72b542f10989f775de162aaeeba33.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
721a120c345f44e4b7f57eb16ec4effe64c72b542f10989f775de162aaeeba33.dll
Resource
win10v2004-20220812-en
General
-
Target
721a120c345f44e4b7f57eb16ec4effe64c72b542f10989f775de162aaeeba33
-
Size
16KB
-
MD5
f89ca92b1234b8d537496431c0c38b90
-
SHA1
9494eb1319f99a4a3055040261cbc119086774cd
-
SHA256
721a120c345f44e4b7f57eb16ec4effe64c72b542f10989f775de162aaeeba33
-
SHA512
e612648e5daf8a7a4db70fc7e6d5c923b17d2486dab6e26a6dc360179567026ce062dee94e32e17d179b1192023001b8b0ee6edc0f0295871799f80c8aef83f0
-
SSDEEP
384:LtT0SWA7/GXmpUNn4iRZhAG4WvYwUmztjbRKl:JT0qmznB6rwUmRvRQ
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
721a120c345f44e4b7f57eb16ec4effe64c72b542f10989f775de162aaeeba33.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
1230 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3211 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2222 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE