CPlApplet
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
Malicious_b9acc6063a90101308d3dc8af8b373fcef0480354e417b7e4d261b5066dded90.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_b9acc6063a90101308d3dc8af8b373fcef0480354e417b7e4d261b5066dded90.dll
Resource
win10v2004-20230621-en
Target
Malicious_b9acc6063a90101308d3dc8af8b373fcef0480354e417b7e4d261b5066dded90.exe
Size
45KB
MD5
d4b95dadd5a9c91ae9125563cfb67cf5
SHA1
f3092de4d8c4976b278a0651beb6f8ede300e415
SHA256
b9acc6063a90101308d3dc8af8b373fcef0480354e417b7e4d261b5066dded90
SHA512
ec2c906b65d004876e3dd523bbe7dba7c60bbcaadb42866eff52b19b6d97829b67f6d92576d8f60b4cf1cb7a3e89a1f7437618ed73a1ffa2025211aeedfeb1b9
SSDEEP
768:act4FPXNzQ/yFs2g42ciPtZLwKHwSMv3wTTdH2n82epp+fqc0Vsaunlr5jYA6:aw4FfZQ/6ebv9XyCTdH2ntGQfqcGir5R
Checks for missing Authenticode signature.
resource |
---|
Malicious_b9acc6063a90101308d3dc8af8b373fcef0480354e417b7e4d261b5066dded90.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetFileSize
Sleep
ReadFile
CreateFileW
DisableThreadLibraryCalls
LocalAlloc
lstrcatW
CloseHandle
LocalFree
ExpandEnvironmentStringsW
VirtualFree
GetModuleFileNameW
lstrlenW
GetProcAddress
VirtualAlloc
LoadLibraryA
lstrcmpiW
GetModuleHandleA
VirtualProtect
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
GetLastError
FlsAlloc
HeapSize
GetModuleHandleW
ExitProcess
RtlUnwindEx
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
WriteFile
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
CPlApplet
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ