CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
Processo.7731289 .dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Processo.7731289 .dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
Processo.8943013 .dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Processo.8943013 .dll
Resource
win10v2004-20220901-en
General
-
Target
2a364c8f7f11d87555ed74a91350868b0c8bf5fcb31c92c8749db0e03212e032
-
Size
178KB
-
MD5
5ebeab70ab0c45cb777e2b364d1f13b4
-
SHA1
49dcce0adc6eab04595c4a2a2a8ba8bc816694c7
-
SHA256
2a364c8f7f11d87555ed74a91350868b0c8bf5fcb31c92c8749db0e03212e032
-
SHA512
d42c6162570eec15368b8840288a1f2f5e87be57f7a595fcc73aa441eeff24953812e80bb1397db6801b0a30e768ffb364e950359c05fb283e229a78dfd1dc29
-
SSDEEP
3072:5YbSPjfEX7HRiiM+WoMW5DO4TjN69usYbSPjfEX7HRiiM+WoMW5DO4TjN69u4:5fjcrHRinpWljAzfjcrHRinpWljA7
Malware Config
Signatures
Files
-
2a364c8f7f11d87555ed74a91350868b0c8bf5fcb31c92c8749db0e03212e032.zip
-
Processo.7731289 .cpl.dll windows x86
48f91f1607113914c7c962e7715d9af1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
ole32
CoTaskMemFree
wininet
InternetCloseHandle
Exports
Exports
Sections
.text Size: 85KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Processo.8943013 .cpl.dll windows x86
48f91f1607113914c7c962e7715d9af1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
ole32
CoTaskMemFree
wininet
InternetCloseHandle
Exports
Exports
CPlApplet
Sections
.text Size: 85KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE