CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
Titulo-Cobranca.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Titulo-Cobranca.dll
Resource
win10v2004-20231222-en
General
-
Target
0e4f3d0cc421a4b1514a6e3d796f0539
-
Size
122KB
-
MD5
0e4f3d0cc421a4b1514a6e3d796f0539
-
SHA1
4342970a317584fb4aec5faba553859af3d16f33
-
SHA256
02d6c10be4520c1e2dfbf60328503647db4e7b22f70f7c9e36a120932a800aec
-
SHA512
f5a5c65fee86f67378e4d501061cee07cfd8faae60e25c20dbd794aba7077ed1662198e2263c846e118b7515ec105b87abe088cd712c17fce0ec5baa9371eab3
-
SSDEEP
3072:QxJTLsTzqTzPRJyvuff1aXzJeIfflfUbHFDWxpCdV7tj:Q7TLsgWWffAdRdmU8Vt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Titulo-Cobranca.cpl
Files
-
0e4f3d0cc421a4b1514a6e3d796f0539.zip
-
Titulo-Cobranca.cpl.dll windows:4 windows x86 arch:x86
2c7bf98ae54bd73609364be4606cf427
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
gdi32
UnrealizeObject
shell32
ShellExecuteA
shfolder
SHGetFolderPathA
Exports
Exports
Sections
pec1 Size: 115KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pec Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE