CPlApplet
Behavioral task
behavioral1
Sample
cd2d11420cbaa0b3eb6dbbad02ba86786648b6f7549960dac0e202e199a3802c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd2d11420cbaa0b3eb6dbbad02ba86786648b6f7549960dac0e202e199a3802c.dll
Resource
win10v2004-20220812-en
General
-
Target
cd2d11420cbaa0b3eb6dbbad02ba86786648b6f7549960dac0e202e199a3802c
-
Size
909KB
-
MD5
c519b35c100f02ae8d2755e34307916c
-
SHA1
49f3d156c569632b01ee6f90ca08c45db0ef2de2
-
SHA256
cd2d11420cbaa0b3eb6dbbad02ba86786648b6f7549960dac0e202e199a3802c
-
SHA512
839bb1d063a868790ed270e8c8459ac4851c8596e456af25fe834fb0240f74c9e4d389ff2ce6b7b90747640293cbea81c7d038fa99714d2515b8733aef41eafa
-
SSDEEP
24576:Uno3ZUQ84HNYa20HRmce9jSlfuhwn5tqumeQ2oiuIi:j84HNYaBR+9xcscQ2oi2
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
cd2d11420cbaa0b3eb6dbbad02ba86786648b6f7549960dac0e202e199a3802c.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: 305KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 543KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE