CPlApplet
Behavioral task
behavioral1
Sample
2ViaBoleto.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2ViaBoleto.dll
Resource
win10v2004-20221111-en
General
-
Target
0db0d7e0001b86404b06658ad153ecf9d474e3604182bbf0e2419e424fbc45a1
-
Size
486KB
-
MD5
02718f15d46bc3497c74cdcb3c1d4674
-
SHA1
7621bd24b6e1c5209eaf76002e5da32ef2d08cae
-
SHA256
0db0d7e0001b86404b06658ad153ecf9d474e3604182bbf0e2419e424fbc45a1
-
SHA512
5a4f4967b8b3afabe77466c59e137f59be8dab70b24c1ec161d3e8726356d105c8be68aa9ac650a2c227807b0de08f45a55477aa0d92397b39798451b7b0f470
-
SSDEEP
6144:puAnUVGQTuNR9tAqUm6odaJt45T9M9XdB5gLRq2OBdstRzHb26J9E+hbzGUJn/:kdSAFdt47UtB5gCBdsbjK6Jyub6g/
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/2ViaBoleto.cpl acprotect -
resource yara_rule static1/unpack001/2ViaBoleto.cpl upx
Files
-
0db0d7e0001b86404b06658ad153ecf9d474e3604182bbf0e2419e424fbc45a1.zip
-
2ViaBoleto.cpl.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 491KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 19KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ