crys
Static task
static1
Behavioral task
behavioral1
Sample
d08c8d1cb25d2799d92e58ae82947ade9838e5bdba7244aeff96acf83a45c74e.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d08c8d1cb25d2799d92e58ae82947ade9838e5bdba7244aeff96acf83a45c74e.dll
Resource
win10v2004-20220901-en
General
-
Target
d08c8d1cb25d2799d92e58ae82947ade9838e5bdba7244aeff96acf83a45c74e
-
Size
16KB
-
MD5
93c9402f171bcdb7dd1b497485c772a0
-
SHA1
643189265364671324f28158a4fe780a8717789e
-
SHA256
d08c8d1cb25d2799d92e58ae82947ade9838e5bdba7244aeff96acf83a45c74e
-
SHA512
721cd76f446bdf3d5cf711b124aad20366ab48e0d5e6c4671e7891ba4d32df0267bd0164158357e496d79acbdf3e9f188b2f0bf67c9d60733a685d94f111df99
-
SSDEEP
384:LtT0SWA7/GXmpUNn4iRZhAG4WvYwUmztjbRKo:JT0qmznB6rwUmRvRN
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
d08c8d1cb25d2799d92e58ae82947ade9838e5bdba7244aeff96acf83a45c74e.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
1230 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3211 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2222 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE