CPlApplet
Behavioral task
behavioral1
Sample
Titulos.pdf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Titulos.pdf.dll
Resource
win10v2004-20221111-en
General
-
Target
a551f5db457512fdef391e12a39a315608a98fda08c64ded834c72b530f74b6b
-
Size
543KB
-
MD5
7585a3a569cfc536f31c8fa4fcfea1eb
-
SHA1
5a0c5c60fc40d02bd25403f41c3ce5f87d3302d7
-
SHA256
a551f5db457512fdef391e12a39a315608a98fda08c64ded834c72b530f74b6b
-
SHA512
84b87df197cbfe7b69284b65edb7de9a3ae9f90f2c503fe20b5ac2cc3ef9fa35dc112f73d29fbf749cf1081293b10b72609e071857d1c925fc22429c928a235a
-
SSDEEP
12288:SHzF/L366DhLiGKvfzo3CV6pj4irtE+7ER7a6uv6ys:SHhT3/uGKvfzo3ChiW9aL6T
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Titulos.pdf.cpl vmprotect
Files
-
a551f5db457512fdef391e12a39a315608a98fda08c64ded834c72b530f74b6b.zip
-
Titulos.pdf.cpl.dll windows x86
12c38aaa7bef4b4a16cd6989f17654ab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersion
GetVersionExA
GetVersion
ResumeThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
ShowWindow
advapi32
RegOpenKeyExA
oleaut32
SafeArrayGetUBound
version
VerQueryValueA
gdi32
GetCurrentPositionEx
comctl32
ImageList_Read
wininet
InternetReadFile
Exports
Exports
Sections
CODE Size: - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 562KB - Virtual size: 562KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ