CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
facebook_mensagenvoz.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
facebook_mensagenvoz.dll
Resource
win10v2004-20221111-en
General
-
Target
bf8d6210da7e09b5a650bcd66f32fc7b8d7e55ef51a027564174842e73ee8e0c
-
Size
287KB
-
MD5
8df9c86174112e6fe0cb7ade7dd0862a
-
SHA1
ca6eed28649f3ebae8f4bd1676bd3dc345e44e05
-
SHA256
bf8d6210da7e09b5a650bcd66f32fc7b8d7e55ef51a027564174842e73ee8e0c
-
SHA512
c772e726fece6b552e7eaf95abeb1aca90b7317dd477ccc7cf579534602b14c20326bdcf2b416c804b4dc1fd8d2066a52cecb3a587e38cfce6a89fe3f3f88777
-
SSDEEP
6144:DBCvXlYOPe0oKZvJ4fhcuyanlkaVkTnj0l2NQISaaKsOHt:DB5Ovmp1nf8jK2HaKsON
Malware Config
Signatures
Files
-
bf8d6210da7e09b5a650bcd66f32fc7b8d7e55ef51a027564174842e73ee8e0c.rar
-
facebook_mensagenvoz.cpl.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 600KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ