CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
1e3096959d581b38315925d8a320095f2a5e592e922586906de4695eb0630ff7.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e3096959d581b38315925d8a320095f2a5e592e922586906de4695eb0630ff7.dll
Resource
win10v2004-20220812-en
General
-
Target
1e3096959d581b38315925d8a320095f2a5e592e922586906de4695eb0630ff7
-
Size
222KB
-
MD5
9e148dd88ff9af8661a0484bd5cdfeda
-
SHA1
9f0d8cd38cdda8ff0e0b8130995c5cb4385a9884
-
SHA256
1e3096959d581b38315925d8a320095f2a5e592e922586906de4695eb0630ff7
-
SHA512
202f6720245bf78c23360eae20fd983eaf3dc8640ef333d97584f468d953117e4d793a82769853aea5f1a900ae839a036536177fa533ad94f2bc5bca0f21c2e1
-
SSDEEP
6144:GsAWrVL2wCYEHN20509QKxlcqJ5GkRfkR4Rm:Giq+Et205RKxDnRf+
Malware Config
Signatures
Files
-
1e3096959d581b38315925d8a320095f2a5e592e922586906de4695eb0630ff7.dll windows x86
5d2087e69f2e6617218433e4e9d5e0c6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CoTaskMemFree
comctl32
_TrackMouseEvent
shell32
SHGetSpecialFolderPathA
Exports
Exports
Sections
.text Size: 214KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE