crys
Static task
static1
Behavioral task
behavioral1
Sample
d6fed93bed662c283856e2affe07ca020e278ff4f9c7a01b248fa5fc51a9b088.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d6fed93bed662c283856e2affe07ca020e278ff4f9c7a01b248fa5fc51a9b088.dll
Resource
win10v2004-20220812-en
General
-
Target
d6fed93bed662c283856e2affe07ca020e278ff4f9c7a01b248fa5fc51a9b088
-
Size
16KB
-
MD5
fd33a269027922c51c3c155dc7fd0fb0
-
SHA1
c9061a16af53c422596e9a6da2923fbbdf40af2b
-
SHA256
d6fed93bed662c283856e2affe07ca020e278ff4f9c7a01b248fa5fc51a9b088
-
SHA512
be02ccfb25a72b746fbc55ad4a618a9d8b74ce01cdd80726d2ed0c486737ef70428fce61b9800f3814bbb26d0b0854193201d62aa6d9b6e2e65b5047ae3a0a7b
-
SSDEEP
384:LtT0SWA7/GXmpUNn4iRZhAG4WvYwUmztjbRKU:JT0qmznB6rwUmRvRt
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
d6fed93bed662c283856e2affe07ca020e278ff4f9c7a01b248fa5fc51a9b088.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
1230 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3211 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2222 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE