CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
a22cd92848ed7196743ee2f7a3276ecef2c4a1c07b2ddc58c96f7a9e63f53fbe.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a22cd92848ed7196743ee2f7a3276ecef2c4a1c07b2ddc58c96f7a9e63f53fbe.dll
Resource
win10v2004-20230915-en
General
-
Target
6ec2f9fba9552d04a20474792db48a0a.bin
-
Size
104KB
-
MD5
267438a2a0de3455a26381906290a767
-
SHA1
9c2779ef578801d3620ed9d9b4a97c96e6d28497
-
SHA256
8d7b718324f5e445e7cf2c511617abef4952ebfe7044b05506a30c179f0a5a79
-
SHA512
3e2a9f51b11029876678f3587749d1c68e8832567a890b04f3e84d36e3473be1beaee9613a9edbd814b9474f9aab05138df49e2e088dfd4f1e31922f8d7398dc
-
SSDEEP
3072:7K2fn78DyXZGJhJyVtCfzmeRDlD/xN6fYr+gMaN1/WsQ:7Kan71JGJLyV8bP/xMqMaNIp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a22cd92848ed7196743ee2f7a3276ecef2c4a1c07b2ddc58c96f7a9e63f53fbe.dll
Files
-
6ec2f9fba9552d04a20474792db48a0a.bin.zip
Password: infected
-
a22cd92848ed7196743ee2f7a3276ecef2c4a1c07b2ddc58c96f7a9e63f53fbe.dll.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ