CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
e98b48b0ff7f24e5867b45335e46cfb2c2afdb2044a029251a54a7121cabb252.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e98b48b0ff7f24e5867b45335e46cfb2c2afdb2044a029251a54a7121cabb252.dll
Resource
win10v2004-20230703-en
General
-
Target
e98b48b0ff7f24e5867b45335e46cfb2c2afdb2044a029251a54a7121cabb252
-
Size
932KB
-
MD5
d7f729d62a933b454aa52f525b77cbe4
-
SHA1
635fb4b19c3fa0af3c099d778550b9bcf1d0a3ee
-
SHA256
e98b48b0ff7f24e5867b45335e46cfb2c2afdb2044a029251a54a7121cabb252
-
SHA512
67502d91e6fe37a46622bad63888c0d900be6f9a62fd3284d9b8f563c683af53279cd4ff636dc2578fe065fff5af357f58b0b8674f209e20db10e002181acb68
-
SSDEEP
24576:nU8HbevUA7XFZvTCaQgJsBaLjPq2ioxQmEc3biNGU3X1vYgnrfGzSAmIQI1LGLLx:U4bevUA7XFZvTCaQgJsBaLjPq2ioxQma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e98b48b0ff7f24e5867b45335e46cfb2c2afdb2044a029251a54a7121cabb252
Files
-
e98b48b0ff7f24e5867b45335e46cfb2c2afdb2044a029251a54a7121cabb252.dll windows x86
61ed3eb9f6af462f03ed002f0c453bc4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntdll
DbgPrint
advapi32
ConvertSidToStringSidW
ConvertStringSidToSidW
GetTokenInformation
LookupAccountSidW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
comctl32
CreatePropertySheetPageW
ord413
DestroyPropertySheetPage
InitCommonControlsEx
PropertySheetW
ord412
ord410
comdlg32
GetOpenFileNameW
kernel32
CloseHandle
DeleteCriticalSection
EnterCriticalSection
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FormatMessageW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceExW
GetDriveTypeW
GetEnvironmentVariableW
GetLastError
GetLocaleInfoW
GetLogicalDriveStringsW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
GetVolumeInformationW
GlobalAlloc
GlobalFree
GlobalMemoryStatusEx
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LoadResource
LocalFree
LockResource
MoveFileExW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WritePrivateProfileStringW
lstrcpyW
lstrcpynW
lstrlenW
msimg32
AlphaBlend
msvcrt
__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_stricmp
_strupr
_unlock
_vsnwprintf
_wcsicmp
_wcsnicmp
_wcsupr
_wtoi
abort
calloc
free
fwrite
memmove
strncmp
strstr
swprintf
towlower
vfprintf
wcscat
wcschr
wcscmp
wcscpy
wcslen
wcsncmp
wcsncpy
wcsrchr
wcsstr
wcstok
wcstoul
ole32
CoTaskMemFree
powrprof
CallNtPowerInformation
setupapi
IsUserAdmin
SetupCloseInfFile
SetupFindFirstLineW
SetupFindNextLine
SetupGetIntField
SetupGetStringFieldW
SetupOpenInfFileW
shell32
SHAddFromPropSheetExtArray
SHBrowseForFolderW
SHCreatePropSheetExtArray
SHDestroyPropSheetExtArray
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
shlwapi
PathFileExistsW
PathIsDirectoryW
StrFormatByteSizeW
gdi32
BitBlt
CreateBitmap
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectW
DeleteDC
DeleteObject
GetObjectW
GetPixel
SelectObject
SetBkMode
SetTextColor
user32
BeginDeferWindowPos
BeginPaint
CheckDlgButton
DeferWindowPos
DestroyIcon
DialogBoxParamW
DrawTextW
EnableWindow
EndDeferWindowPos
EndDialog
EndPaint
FillRect
GetClientRect
GetDC
GetDlgItem
GetDlgItemInt
GetDlgItemTextW
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
IsDlgButtonChecked
KillTimer
LoadIconW
LoadImageW
LoadStringW
MapDialogRect
MapWindowPoints
MessageBoxW
OffsetRect
PostMessageW
ReleaseDC
SendDlgItemMessageW
SendMessageW
SetDlgItemInt
SetDlgItemTextA
SetDlgItemTextW
SetRect
SetTimer
SetWindowLongW
SetWindowTextW
ShowScrollBar
ShowWindow
SystemParametersInfoW
wsprintfW
Exports
Exports
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 744KB - Virtual size: 743KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rossym Size: 96KB - Virtual size: 95KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ