Static task
static1
Behavioral task
behavioral1
Sample
System_Update_Win10.4a4793a31463b.cpl.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
System_Update_Win10.4a4793a31463b.cpl.dll
Resource
win10v2004-20220901-en
General
-
Target
System_Update_Win10.4a4793a31463b.cpl.exe
-
Size
73KB
-
MD5
90a417a2f0b30b3fcd7a958edecc5777
-
SHA1
590d6273e401526c76b4cbe35393e29f400363ae
-
SHA256
bc3a0e276a26612ffa45f229b069b624750e2c0737b2af2f934378d85d87a2f9
-
SHA512
a7466139bbc61bb5c36c1d11958ca6e0e4e4608df25d7f6e7c9afb62a72ccb8d2e78a0bfec0cb4b3942ed697be8111dc66405926f4a0f5cda5d8162396ac93b4
-
SSDEEP
1536:Awnu+nR6RxOZ46S3CTNqF9NyiBrhcw8FBP:fu+u6y0MLyYh8FZ
Malware Config
Signatures
Files
-
System_Update_Win10.4a4793a31463b.cpl.exe.dll windows x64
Code Sign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ