CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
118f7a71ffb05e4916963aafbc9f487bbca4d0d1c46d04f94552ef45e4be6fe3.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
118f7a71ffb05e4916963aafbc9f487bbca4d0d1c46d04f94552ef45e4be6fe3.dll
Resource
win10v2004-20230703-en
General
-
Target
118f7a71ffb05e4916963aafbc9f487bbca4d0d1c46d04f94552ef45e4be6fe3
-
Size
73KB
-
MD5
19d81d3735e7c25b252539862611baa4
-
SHA1
7641d7f132bb724ddc2db04eabc54d0d2974a2fe
-
SHA256
118f7a71ffb05e4916963aafbc9f487bbca4d0d1c46d04f94552ef45e4be6fe3
-
SHA512
9ad81a1b850fb510be687bfcb00baee73ad83fa3984c72d030ab477d2d75dffe4377cd358b58af072ff28c2abf90e0d6f29287692487d5fdf39455d644d4d81d
-
SSDEEP
1536:q2/6Vgx+GhnLvC8DLgKUvpUYtOsuTyf2YxsPXBg/0JNGnieVEEGrPpRqT7BM+iNs:q2/6Vgx+GhnLv7LQR/u9hEGrPpRMG+e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 118f7a71ffb05e4916963aafbc9f487bbca4d0d1c46d04f94552ef45e4be6fe3
Files
-
118f7a71ffb05e4916963aafbc9f487bbca4d0d1c46d04f94552ef45e4be6fe3.dll windows x86
9796c79956d3236cf0ee152dfb64dc85
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
comctl32
PropertySheetW
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memmove
strncmp
vfprintf
wcslen
wcsncmp
user32
GetParent
LoadIconW
LoadStringW
SendDlgItemMessageW
SendMessageW
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 972B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rossym Size: 17KB - Virtual size: 17KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ