CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
Boletim de Ocorrência Online.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Boletim de Ocorrência Online.dll
Resource
win10v2004-20220812-en
General
-
Target
4ebf627b9512ece57a928a3f65a279474eb59413a5edf905cb2f83e2cee65e85
-
Size
279KB
-
MD5
e77fc6793676eb2cb894620c479228ac
-
SHA1
804d5a6e25c15e1e2d57d11af9afd3dab475f288
-
SHA256
4ebf627b9512ece57a928a3f65a279474eb59413a5edf905cb2f83e2cee65e85
-
SHA512
97f498d572a860b4f0719a1f9073c50cb9e35574969b79594a56d8e80819c0b0319c0530753a8b2035570c6c96e3247d15f2d4a38a046448de61148cf56d62a6
-
SSDEEP
6144:JfwJ3FgesOHScO0iPevXUGaAMxxaQ3lpxjDVhgtKwjG/zCl:JYJ8OHTDVg3lp9PgS/C
Malware Config
Signatures
Files
-
4ebf627b9512ece57a928a3f65a279474eb59413a5edf905cb2f83e2cee65e85.rar
-
Boletim de Ocorrência Online.cpl.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 570KB - Virtual size: 570KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ