crys
Static task
static1
Behavioral task
behavioral1
Sample
6e29ec20141c18bab45a4f60db89fa0baca625a352a4dd79eff2350d614bbd09.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e29ec20141c18bab45a4f60db89fa0baca625a352a4dd79eff2350d614bbd09.dll
Resource
win10v2004-20221111-en
General
-
Target
6e29ec20141c18bab45a4f60db89fa0baca625a352a4dd79eff2350d614bbd09
-
Size
16KB
-
MD5
f6f21ded08673919da26272eec25e830
-
SHA1
917922e61780a26a40fd724d3878c1ae96938935
-
SHA256
6e29ec20141c18bab45a4f60db89fa0baca625a352a4dd79eff2350d614bbd09
-
SHA512
8364bfab7c2dcb0e0975d8280c41992aeacde96ce0e2ea40777c50986f6b77f3b48fb2d6513aea2df7c9410a8365b31d9e1d371d395f781ff9e3f8b6e297c319
-
SSDEEP
384:LtT0SWA7/GXmpUNn4iRZhAG4WvYwUmztjbRKm:JT0qmznB6rwUmRvR/
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect
Files
-
6e29ec20141c18bab45a4f60db89fa0baca625a352a4dd79eff2350d614bbd09.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
1230 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3211 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2222 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE