CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
c541c90d7ecca381349a56da2e4fc6d395b9edc666c4498d9fac12d2ac7219d4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c541c90d7ecca381349a56da2e4fc6d395b9edc666c4498d9fac12d2ac7219d4.dll
Resource
win10v2004-20221111-en
General
-
Target
c541c90d7ecca381349a56da2e4fc6d395b9edc666c4498d9fac12d2ac7219d4
-
Size
84KB
-
MD5
37e0e3c403c38b0e85658aba6aaab8de
-
SHA1
679ee4b6c45b8e8ec2f2b63dcb0307c9f816b2c6
-
SHA256
c541c90d7ecca381349a56da2e4fc6d395b9edc666c4498d9fac12d2ac7219d4
-
SHA512
47fa53daf113840982476eefb9483f7ff13c641eefbc02c080163eeab716f1c34326493f71d1c7aaf5f4e27e2a006cd027d58f05d18312b0510db927498c648f
-
SSDEEP
768:5Omd3BBfmU1DeFJ7eSJVF8ydi5sNomLKoMLTDT708yP/W6FSEHF9mOSUO2lECmnT:bd32GkeydCBe0fCHFS9O380oILqL
Malware Config
Signatures
Files
-
c541c90d7ecca381349a56da2e4fc6d395b9edc666c4498d9fac12d2ac7219d4.dll windows x86
60c44d9714723aff40d7f486af41dbf2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesW
FreeResource
QueryPerformanceFrequency
WriteProfileStringA
GetEnvironmentVariableW
ReadConsoleW
FindClose
WaitForSingleObject
GetSystemDirectoryW
ReadConsoleInputW
CompareStringW
FindActCtxSectionStringW
WinExec
GetDiskFreeSpaceA
SearchPathW
DnsHostnameToComputerNameW
GetQueuedCompletionStatus
LocalUnlock
CreateTimerQueue
GetVolumeNameForVolumeMountPointW
GetExitCodeProcess
GetVolumePathNamesForVolumeNameW
GetStringTypeA
lstrcpynA
GetProfileStringW
SetLocalTime
GetEnvironmentStringsW
TerminateThread
CreateFileW
DeleteFileW
AreFileApisANSI
GetLargestConsoleWindowSize
CopyFileExW
GetEnvironmentVariableA
GetCommProperties
SetProcessShutdownParameters
IsProcessorFeaturePresent
CreateConsoleScreenBuffer
PeekConsoleInputA
BackupWrite
GetDiskFreeSpaceW
FindResourceA
TransmitCommChar
GetConsoleScreenBufferInfo
SetFileApisToOEM
GetModuleFileNameW
GetTempPathA
GetBinaryTypeA
GetThreadPriority
CreateTimerQueueTimer
DosDateTimeToFileTime
CreateProcessW
GetStartupInfoA
GlobalFindAtomA
GetCurrentThread
lstrcatW
OpenProcess
SetTimeZoneInformation
SetCurrentDirectoryA
ExpandEnvironmentStringsA
WriteConsoleW
CreateNamedPipeW
FindNextFileA
InterlockedExchangeAdd
SetSystemTime
GlobalMemoryStatusEx
GetCommandLineW
UpdateResourceA
GetTimeZoneInformation
lstrcpynW
GetVolumeInformationA
VirtualProtect
GetTickCount
CreateDirectoryA
Sleep
GetModuleFileNameA
EnterCriticalSection
GetSystemDirectoryA
GetModuleHandleA
LeaveCriticalSection
InterlockedDecrement
GetProcessHeap
GlobalAlloc
SetLastError
LocalFree
CreateEventA
HeapAlloc
GetProcAddress
GetLastError
UnmapViewOfFile
GetSystemInfo
ExitProcess
CreateFileA
SetEvent
OpenEventA
LoadLibraryA
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
shell32
SHGetInstanceExplorer
SHOpenFolderAndSelectItems
SHFileOperationA
SHCreateDirectoryExW
ExtractIconA
SHGetFolderPathAndSubDirW
ExtractIconW
SHGetFolderPathA
gdi32
AddFontResourceA
CloseMetaFile
GetPolyFillMode
GetCharWidth32W
GetMetaFileBitsEx
AbortPath
SetMetaFileBitsEx
GetSystemPaletteEntries
SetMetaRgn
GetTextExtentPointW
SetTextAlign
SetMapperFlags
GetTextExtentPointA
GetDCOrgEx
SetDIBits
GetStockObject
EnumFontFamiliesW
GetWindowOrgEx
UnrealizeObject
CopyMetaFileW
PolyBezier
CreateCompatibleBitmap
CopyMetaFileA
GetTextExtentExPointW
EndPage
ExtTextOutA
EndPath
SetViewportOrgEx
PolyPolyline
GetOutlineTextMetricsA
PolyDraw
GetPaletteEntries
PtInRegion
RemoveFontResourceW
GetFontResourceInfoW
PlayEnhMetaFileRecord
ModifyWorldTransform
EnumEnhMetaFile
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ