CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
fdcf170385351301f836586d384b4deb5d496368fc7bdfa50ca85ae2b9c9bbda.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fdcf170385351301f836586d384b4deb5d496368fc7bdfa50ca85ae2b9c9bbda.dll
Resource
win10v2004-20220812-en
General
-
Target
fdcf170385351301f836586d384b4deb5d496368fc7bdfa50ca85ae2b9c9bbda
-
Size
223KB
-
MD5
3eca322e7f06c26901ecdd37affb6946
-
SHA1
d8087ee8df199d2aad5326e71c62ccc0184a21a7
-
SHA256
fdcf170385351301f836586d384b4deb5d496368fc7bdfa50ca85ae2b9c9bbda
-
SHA512
08e1f06c63b14f1d45f6b8947ecd36f4f884703a34c6a04d3feeaeb893900f1f78d116664c4953882ba408a96c80f91741cec1e70b02e855221e8ab37302d40c
-
SSDEEP
6144:/Wu91F8ghjzq08oPbhL+I3RXdtTdhKOjl3sjDASs00YMlWcLvZQdDv:/Wu/Fndq0zPbhaI3hdtTPKSwPs0tMl9c
Malware Config
Signatures
Files
-
fdcf170385351301f836586d384b4deb5d496368fc7bdfa50ca85ae2b9c9bbda.dll windows x86
1e3512bf5e8092d8528741bf9dd9d9ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CLSIDFromProgID
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
Exports
Exports
Sections
CODE Size: 213KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE