crys
Behavioral task
behavioral1
Sample
10421c6f6c6a47d31ff0ae15e139f7b0cca3531e04459402f20f6c65240bd2a0.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
10421c6f6c6a47d31ff0ae15e139f7b0cca3531e04459402f20f6c65240bd2a0.dll
Resource
win10v2004-20220812-en
General
-
Target
10421c6f6c6a47d31ff0ae15e139f7b0cca3531e04459402f20f6c65240bd2a0
-
Size
4KB
-
MD5
7df86ce20c742d4493bca1ef0b8c2910
-
SHA1
5255478604244df0bec321fc1ef123a0e65de0bf
-
SHA256
10421c6f6c6a47d31ff0ae15e139f7b0cca3531e04459402f20f6c65240bd2a0
-
SHA512
71cde95f11700bd2ea4356544f0fe081cec3133c72b6c2ab5cddca81c9d9368d7f991bf004ea012cd3a86c4a377dab89a3ae13241ee3406e10638a8ba076965f
-
SSDEEP
48:a5zuMqBcq06phM/wwWLSeJY8JTa6Il+Lua+fRteE5xJhyPjny3PNEJdBomrntS7f:TRphMzf810y4vhGy31EJd+mrntSO2
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
10421c6f6c6a47d31ff0ae15e139f7b0cca3531e04459402f20f6c65240bd2a0.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ