CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
Boleto_Proposta.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Boleto_Proposta.dll
Resource
win10v2004-20220812-en
General
-
Target
5a7f8eb0ec1ae9a8d75179d7cabdc63a361fe6ebd8f788587e9056383ff08164
-
Size
112KB
-
MD5
72d771fc94e1c7473287a8fd6a6b5bea
-
SHA1
54962722597be9a66940f5c27adae9fae0c7b70a
-
SHA256
5a7f8eb0ec1ae9a8d75179d7cabdc63a361fe6ebd8f788587e9056383ff08164
-
SHA512
eea62cdcd2cbadcb2d6532802f4b4146f2607fb7b51e2a2f5e160a6c8c588972a7990d65a78a797218f0a30738c33633575e0c5b6103d7cc88d26f925a2dc738
-
SSDEEP
3072:IWHmDK26Xf79ccjYXywag7w+UoVARkrl8E/XnLiBDe:9HLVP7+c05kXz2rfXnuDe
Malware Config
Signatures
Files
-
5a7f8eb0ec1ae9a8d75179d7cabdc63a361fe6ebd8f788587e9056383ff08164.zip
-
Boleto_Proposta.cpl.dll windows x86
48f91f1607113914c7c962e7715d9af1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
ole32
CoTaskMemFree
wininet
InternetCloseHandle
Exports
Exports
Sections
.text Size: 88KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE