installer[.]cpl

Resubmissions

14/09/2022, 17:56

220914-wjd6gsefhq 1

25/07/2022, 01:23

220725-brt7fsggg7 1

Sharing

Copy URL Twitter E-mail

General

Target

installer.cpl
Size

1.3MB
MD5

fa26469b92f216ccf62311a85c5ce158
SHA1

976dbd21b9f75e243a21e550bcf4f7e1a47b373a
SHA256

77106f563259fa1eb82a8c793a1df595d55ab12c08f23fda1906532853c7a035
SHA512

f876ca99e2b1fad0af09592f57ec2de1f0abf2d39cbb07f0331e1b97d4fddf71e6b1a6855736f56a88a2c3ab6093e54faa14d82cc183081c3159db2cf82e24ca
SSDEEP

24576:+R6WR3clcUT5OuRA4Ke8Dr46Vw5IusmahhwEIx95/wFRstxyj5gqH2z0:+IsolAfe8n3aNdOh1uxybHf

Score

N/A

Malware Config

Signatures

Files

installer.cpl
.dll windows x86

899ec97a5dd814506ecf315fa78aa831

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ExcludeClipRect
GetOutlineTextMetricsW
ExtTextOutW
GetPaletteEntries
FrameRgn
PolyPolyline
EndDoc
GetCurrentObject
GetDeviceCaps
ExtEscape
GetRasterizerCaps
GetTextExtentExPointA

user32

LoadCursorA
GetTabbedTextExtentA
GetUpdateRgn
LoadKeyboardLayoutA
GetWindowTextA
GetScrollBarInfo
GetMenuStringA
GetWindowDC
IsCharUpperA
GetMenuBarInfo
GetWindowLongW
DefMDIChildProcW
GetMenuItemID
FindWindowA

wininet

FindFirstUrlCacheEntryExW

crypt32

CryptGetDefaultOIDFunctionAddress

ws2_32

send

shlwapi

SHRegDuplicateHKey

oleaut32

VariantCopyInd

msvcrt

toupper
strspn
fputws
fseek

kernel32

GetUserGeoID
OpenProcess
GetConsoleProcessList
SetTapePosition
GetUserDefaultLangID
SetCommMask
LoadLibraryW
OutputDebugStringA
GetFileAttributesA
FlushConsoleInputBuffer
GetDateFormatA
EnumTimeFormatsA
FindNextVolumeMountPointW
DeleteCriticalSection
GlobalGetAtomNameA
lstrcpynW
GetProfileIntW
GetStartupInfoA
GetComputerNameExW
GetLastError
LoadLibraryExA
GetPrivateProfileIntA
GetCPInfo
GetTempPathA
GetTapePosition
Module32Next
DeleteTimerQueue
GetConsoleWindow
GetTapeStatus
VirtualProtect
GlobalAddAtomW
GetLocalTime
GetUserDefaultUILanguage
GetSystemInfo
GetFileTime
FindActCtxSectionStringW
GetQueuedCompletionStatus
GetWindowsDirectoryA
DebugBreak
FlushViewOfFile
GenerateConsoleCtrlEvent
GetLogicalDriveStringsW
CloseHandle
GetModuleHandleA
GetCurrentThreadId

advapi32

LogonUserExW
GetSecurityDescriptorDacl
GetWindowsAccountDomainSid
EnumServicesStatusW
NotifyBootConfigStatus
SetServiceObjectSecurity
DeleteService

shell32

ExtractIconExA

winspool.drv

GetPrinterA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT0
Size: 572KB - Virtual size: 570KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt1
Size: 572KB - Virtual size: 571KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rwju
Size: 680.1MB - Virtual size: 680.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

Files

899ec97a5dd814506ecf315fa78aa831

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

wininet

crypt32

ws2_32

shlwapi

oleaut32

msvcrt

kernel32

advapi32

shell32

winspool.drv

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 112KB - Virtual size: 110KB

.CRT0 Size: 572KB - Virtual size: 570KB

.crt1 Size: 572KB - Virtual size: 571KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 12KB

.rwju Size: 680.1MB - Virtual size: 680.1MB

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 112KB - Virtual size: 110KB

.CRT0
Size: 572KB - Virtual size: 570KB

.crt1
Size: 572KB - Virtual size: 571KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 12KB

.rwju
Size: 680.1MB - Virtual size: 680.1MB