crys
Behavioral task
behavioral1
Sample
a852704cf33f4262040b9b5cc1a3eaae8e14e6f6330c73721702dd4e7d4fd2c5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a852704cf33f4262040b9b5cc1a3eaae8e14e6f6330c73721702dd4e7d4fd2c5.dll
Resource
win10v2004-20220812-en
General
-
Target
a852704cf33f4262040b9b5cc1a3eaae8e14e6f6330c73721702dd4e7d4fd2c5
-
Size
3KB
-
MD5
48d0a02228a4afbb02ae7701886a00c0
-
SHA1
106b9da990b1b588b2ffb0840c6a00ffe400418e
-
SHA256
a852704cf33f4262040b9b5cc1a3eaae8e14e6f6330c73721702dd4e7d4fd2c5
-
SHA512
66b6047204319b2eb1d4f98f2d5f3ae0bad1b53b1b1ada552883e02ddf1e8187812a380bfc4a47c3053419cb201f9afd37fda38513d2e6b81e31bbcd11aec8b1
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
a852704cf33f4262040b9b5cc1a3eaae8e14e6f6330c73721702dd4e7d4fd2c5.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 557B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 485B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ