Static task
static1
Behavioral task
behavioral1
Sample
Antivirus_Upgrade_Cloud.680409c94d12.cpl.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Antivirus_Upgrade_Cloud.680409c94d12.cpl.dll
Resource
win10v2004-20220812-en
General
-
Target
Antivirus_Upgrade_Cloud.680409c94d12.cpl.exe
-
Size
1.2MB
-
MD5
b2de8946fb439575f2777559e1a74095
-
SHA1
1ad2a01982c85718bf883899c3de7d329c8e4057
-
SHA256
79494b2b76515207a2cf1a29484096cbf884ea4b0e2b834af07beac7879ce714
-
SHA512
bb6f4f952a8067aab434e45f38565ad3f1d7fb7c78626608ac6fffb08b145ead5d9643e7a88f6cacb68ae45ade644ad6d4be32d4ee291767074006e874147943
-
SSDEEP
1536:gOY47IHwHDLvujZZmn/tUuNpOLR1aJmvH8GsBjW5BKbOTWgYwJkRG5z:gOt7rHDLvUZmn/t7Npu/GIkRG5z
Malware Config
Signatures
Files
-
Antivirus_Upgrade_Cloud.680409c94d12.cpl.exe.dll windows x64
Code Sign
97:6d:b5:c4:0d:a4:8b:5f:e2:12:7e:4d:57:da:33:5c:28:ef:9d:2fSigner
Actual PE Digest97:6d:b5:c4:0d:a4:8b:5f:e2:12:7e:4d:57:da:33:5c:28:ef:9d:2fDigest Algorithmsha1PE Digest MatchesfalseTrustedfalseSigning CertificateNO CERTIFICATEHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.vdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE