CPlApplet
DKnkg4ur
Hviq052j3
Static task
static1
Behavioral task
behavioral1
Sample
dettagli.dll
Resource
win7-20230831-en
Target
dettagli.zip
Size
159KB
MD5
7931caed007f9f3b0c6cabe013eeb1e2
SHA1
8c597389d9051f2342a0fad2fd24d88b7749d014
SHA256
b9bb91547f6205ab5bf3d62d6d414bc80902eaf3b4eb59de86840bb52383cbae
SHA512
0b85edf3e53c5b23bd62a97258d7cfac58454d91ca306ec5365817529f8df33e012959c480972ecc71d21d3f0a81c0c23fa9a5d1906fbf2e4f347601934511a6
SSDEEP
3072:zQ0nEQH0AkecLGrcchh3s47XlXfT+Fgjl/P5pcAyVV3wsOmtEQsh41TBKF7As01T:s0nEBA5r3h3LX9r+qNBazgFmWQsudBcO
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/dettagli.cpl |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
CloseHandle
GetLastError
FindFirstFileA
FindNextFileA
LockFile
UnlockFile
GetFileType
DeleteFileA
SetEndOfFile
WaitForMultipleObjects
GetCurrentThread
CallNamedPipeA
VirtualAlloc
CreateMutexA
ReleaseMutex
GetDiskFreeSpaceA
GetSystemTime
RtlUnwind
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsProcessorFeaturePresent
HeapAlloc
HeapFree
GetModuleHandleW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetStringTypeW
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
DecodePointer
WriteConsoleW
CreateFileW
CPlApplet
DKnkg4ur
Hviq052j3
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ