CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
0054af30c41475935b555934c79285564e3ca174c47ada5a41f91e0af45f2e68.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0054af30c41475935b555934c79285564e3ca174c47ada5a41f91e0af45f2e68.dll
Resource
win10v2004-20221111-en
General
-
Target
0054af30c41475935b555934c79285564e3ca174c47ada5a41f91e0af45f2e68
-
Size
150KB
-
MD5
0980b5ee6bc75ac805800ac43e85ebb3
-
SHA1
260696ca510a168c6973177a94a58784b6ff033a
-
SHA256
0054af30c41475935b555934c79285564e3ca174c47ada5a41f91e0af45f2e68
-
SHA512
ae40e1e513c868625f590ea59cf5a30f414e88549462fc55bc576cca961b817f7fce9f836d32ce37a041d9871a42c3987bdf3929e03f1765665f7c097a1a957f
-
SSDEEP
3072:ngZed+nnfBYLJ0TWgQrXzhpBYuPgkTQ/iFKxdtovEP:ngBnnfBnTWgQrZvTs/QKxdV
Malware Config
Signatures
Files
-
0054af30c41475935b555934c79285564e3ca174c47ada5a41f91e0af45f2e68.dll windows x86
86c4509fc9250dd001c7e8889a2ea717
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
SaveDC
shell32
ShellExecuteA
comctl32
ImageList_Add
urlmon
URLDownloadToFileA
Exports
Exports
Sections
.MPRESS1 Size: 141KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE