CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
2bce8de8c60fbce6bd7c0469492f4aa3984df353f648f199753983f007ec6776.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2bce8de8c60fbce6bd7c0469492f4aa3984df353f648f199753983f007ec6776.dll
Resource
win10v2004-20220812-en
General
-
Target
2bce8de8c60fbce6bd7c0469492f4aa3984df353f648f199753983f007ec6776
-
Size
84KB
-
MD5
a2fdec22e56fb3952e461dac692c81cf
-
SHA1
63902f49cc0a3c5e5ea7272c751098114ccc0150
-
SHA256
2bce8de8c60fbce6bd7c0469492f4aa3984df353f648f199753983f007ec6776
-
SHA512
e2e90a6a26f7d41f5c89c6443775271d8b6df8f9b873f9188cacc5c7c023034f60366074cf7d2afca083839a84a9b03d55d3b75fe46995e18de16a1915de4870
-
SSDEEP
1536:lUDjFsUbz4z6CBKVsPqoqhVgRpJSWJ4rNCo6dh/J:lU4zx+sqoqhVgRpfJGCo6dh/J
Malware Config
Signatures
Files
-
2bce8de8c60fbce6bd7c0469492f4aa3984df353f648f199753983f007ec6776.dll windows x86
cb1f7a4da1a9669f3cc0e97184420298
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ChangeTimerQueueTimer
UnlockFile
RegisterWaitForSingleObjectEx
GetCalendarInfoW
GetNumberOfConsoleInputEvents
RemoveDirectoryA
ResumeThread
FormatMessageW
CreateNamedPipeW
TerminateThread
WideCharToMultiByte
GetBinaryTypeA
VerifyVersionInfoW
AddAtomA
CreateTimerQueue
CreateMutexW
SetHandleInformation
GetDefaultCommConfigW
UpdateResourceA
TerminateProcess
IsDBCSLeadByteEx
SetDefaultCommConfigW
CreateEventW
IsProcessorFeaturePresent
GetConsoleMode
ConvertDefaultLocale
ResetEvent
SetEndOfFile
Beep
CreateMailslotA
WaitNamedPipeA
GetDateFormatA
FindFirstFileA
GetStringTypeExA
EnumResourceNamesA
GetNumberFormatW
GetFileSizeEx
CreateMutexA
GetCurrentDirectoryA
FindNextVolumeMountPointW
GlobalFindAtomW
CreateConsoleScreenBuffer
FindFirstVolumeW
GetDateFormatW
FreeResource
GetComputerNameW
FindClose
CreateWaitableTimerA
SetInformationJobObject
GetFullPathNameA
LocalFlags
GetTimeZoneInformation
GetCommModemStatus
MoveFileA
HeapSetInformation
GlobalMemoryStatus
FindActCtxSectionGuid
SetFilePointer
GetCPInfo
GetFileInformationByHandle
GetTempFileNameW
AddAtomW
AreFileApisANSI
GetLocaleInfoA
IsBadCodePtr
GetLogicalDriveStringsW
PurgeComm
HeapCreate
ReadFile
lstrcmpiA
CreateHardLinkW
SetConsoleActiveScreenBuffer
GetModuleHandleExW
SetHandleCount
GetCurrentProcessId
GetConsoleCP
GetEnvironmentStringsW
LocalReAlloc
FlushConsoleInputBuffer
WriteConsoleW
GetModuleHandleW
FindAtomW
MoveFileW
LocalAlloc
lstrcatW
VirtualQueryEx
GetUserDefaultUILanguage
ExpandEnvironmentStringsW
GetFileTime
WriteProfileStringW
GetAtomNameA
GetStringTypeW
GetSystemWow64DirectoryW
PeekConsoleInputW
SizeofResource
VerSetConditionMask
UnmapViewOfFile
GlobalAlloc
ExitProcess
VirtualProtect
HeapAlloc
LoadLibraryA
OpenEventA
lstrlenA
GetVolumeInformationA
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
MapViewOfFile
GetProcessHeap
InterlockedExchange
CreateFileMappingA
CloseHandle
LocalFree
SetEvent
GetComputerNameA
GetSystemInfo
GetProcAddress
WriteFile
GetModuleFileNameA
CreateProcessA
CancelWaitableTimer
CreateEventA
ole32
CoGetMalloc
CoCreateInstance
FreePropVariantArray
CoDisableCallCancellation
OleQueryLinkFromData
RegisterDragDrop
OleLockRunning
CoCreateFreeThreadedMarshaler
OleCreateFromData
PropVariantCopy
OleDestroyMenuDescriptor
CoCreateInstanceEx
CoInitialize
CoTaskMemAlloc
CreateDataCache
CoLockObjectExternal
CoGetCallContext
OleDoAutoConvert
CoUnmarshalInterface
CoWaitForMultipleHandles
StringFromGUID2
BindMoniker
CoTaskMemRealloc
CoAllowSetForegroundWindow
CreateDataAdviseHolder
oleaut32
SysReAllocStringLen
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
advapi32
RegQueryValueExA
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegSetValueExA
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetCurrentHwProfileA
RegCloseKey
QueryServiceConfigW
CredWriteDomainCredentialsW
RegQueryValueA
MakeAbsoluteSD
RegNotifyChangeKeyValue
LogonUserA
CreateProcessAsUserA
RegQueryValueExW
RegOpenCurrentUser
RegReplaceKeyW
OpenEventLogA
CloseServiceHandle
CredGetSessionTypes
RegConnectRegistryA
RegCreateKeyA
RegEnumKeyA
SaferSetLevelInformation
CredFree
RegFlushKey
ImpersonateLoggedOnUser
LockServiceDatabase
ImpersonateSelf
RegEnumKeyExW
GetTokenInformation
UnlockServiceDatabase
GetUserNameA
shell32
SHPathPrepareForWriteW
SHGetFolderPathW
SHGetFileInfoW
ShellAboutA
SHBrowseForFolderA
SHAppBarMessage
SHFormatDrive
SHGetPathFromIDListA
ShellAboutW
ShellExecuteW
SHGetFolderPathA
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ