CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
ada8901d83302b2e6ccaa3fdf1d838478670a635ee563a2eea78567a42046e66.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ada8901d83302b2e6ccaa3fdf1d838478670a635ee563a2eea78567a42046e66.dll
Resource
win10v2004-20230703-en
General
-
Target
ada8901d83302b2e6ccaa3fdf1d838478670a635ee563a2eea78567a42046e66
-
Size
416KB
-
MD5
cad1b3d43cb18e3c43fc27cb2a74cb7b
-
SHA1
fa4d487bf633a3db905bc524e50e82447957bd29
-
SHA256
ada8901d83302b2e6ccaa3fdf1d838478670a635ee563a2eea78567a42046e66
-
SHA512
aad5f152c3cf0a4607827cd1cafd26c37e650e08d67649613ce3be07adc07cd173c7137dbdd45db8fea5cf14fbe02109b9469c1bc8fcac8e411362a61b089260
-
SSDEEP
3072:XcQ00KT9syNLwOnqLsEHpYCNLUt2iV7I8gGBk1yUk8ggDiEDVZaXGpaDok8auLc8:XcQ0F+FaDSauTanlaq4a2grq3Rui
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ada8901d83302b2e6ccaa3fdf1d838478670a635ee563a2eea78567a42046e66
Files
-
ada8901d83302b2e6ccaa3fdf1d838478670a635ee563a2eea78567a42046e66.dll windows x86
84f02ee23f151c692632cb01bcb2cae7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
RegCreateKeyExW
RegEnumValueW
RegQueryValueExW
RegSetValueExW
comctl32
PropertySheetW
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
lstrcpyW
msvcrt
__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
_wtoi
abort
calloc
free
fwrite
malloc
memmove
strncmp
swprintf
vfprintf
wcscpy
gdi32
DeleteObject
user32
CheckDlgButton
CheckRadioButton
CopyRect
DialogBoxParamW
EnableWindow
EndDialog
FillRect
GetCaretBlinkTime
GetDC
GetDlgItem
GetParent
GetSysColorBrush
GetWindowLongW
GetWindowRect
InvalidateRect
KillTimer
LoadIconW
LoadStringW
ReleaseDC
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetCaretBlinkTime
SetTimer
SetWindowLongW
SystemParametersInfoW
Exports
Exports
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 972B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 71B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 359KB - Virtual size: 359KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rossym Size: 29KB - Virtual size: 28KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ