CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
a2176ff4761413f2a0d63885b7227460.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2176ff4761413f2a0d63885b7227460.dll
Resource
win10v2004-20240221-en
General
-
Target
a2176ff4761413f2a0d63885b7227460
-
Size
164KB
-
MD5
a2176ff4761413f2a0d63885b7227460
-
SHA1
60f42ed470a36b3e806be2af8081fc7e6c2cfeae
-
SHA256
77e180e5589f17ff7f2abb07b97129985a943883e902c24c0766719b9aef7d0a
-
SHA512
1724962f8cd20dba4e25401b40d25266f0d41691c7e9ecd9bc97be03f491620db694df1ad89c296d1a2b5783100ac71bf97ab6d209bbf68c312bad9e49e281d6
-
SSDEEP
3072:LkKPugRsjnK4NrGW1ha7BVvK+tz4rCgac/9vvWWS3evc:LobK4GW1h4vKA4rvuh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2176ff4761413f2a0d63885b7227460
Files
-
a2176ff4761413f2a0d63885b7227460.dll windows:4 windows x86 arch:x86
3e59e5dcf89123b9545a393cbbea0651
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemTimeAsFileTime
IsDebuggerPresent
GetModuleHandleA
GetLastError
FreeLibrary
GetCurrentDirectoryW
GetCurrentThreadId
GetTimeFormatW
CreateFileA
InterlockedDecrement
LoadLibraryExA
GetModuleFileNameA
SetEndOfFile
GetEnvironmentStrings
SetStdHandle
MoveFileA
InterlockedExchange
DeleteCriticalSection
ExitProcess
SetHandleCount
HeapAlloc
SetConsoleCP
OutputDebugStringA
GetCurrentProcess
GetCommandLineA
lstrcmpiW
VirtualProtect
HeapSize
GetCurrentProcessId
GetStartupInfoA
GetOEMCP
CreateSemaphoreW
Sleep
CreateProcessW
GetTickCount
GetACP
rpcrt4
RpcStringFreeW
user32
SetDlgItemTextW
RegisterClassExW
TranslateMessage
MoveWindow
GetDC
GetWindowThreadProcessId
SetScrollPos
msvcrt
_vsnwprintf
_XcptFilter
gdi32
GetTextMetricsW
ExtTextOutW
CreateRectRgn
RectVisible
advapi32
RegDeleteKeyA
GetLengthSid
RegEnumKeyExW
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ