CPlApplet
DllCanUnloadNow
DllGetClassObject
DllGetClassObjectEx
DllRegisterServer
DllRegisterServerEx
DllUnregisterServer
DllUnregisterServerEx
Static task
static1
Behavioral task
behavioral1
Sample
malware.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
malware.dll
Resource
win10v2004-20240226-en
Target
malware.exe
Size
501KB
MD5
016169ebebf1cec2aad6c7f0d0ee9026
SHA1
0931fd4e05e6ea81c75f8488ecc1db9e66f22cbb
SHA256
9c891edb5da763398969b6aaa86a5d46971bd28a455b20c2067cb512c9f9a0f8
SHA512
09a16d6f11312010795329059dcda0aeea4b781d7ebe52467ad7e628a8ccc85abc8fd9592cde61dbf2900289f9870c149142899e3b0a1d2db1ce94052083034d
SSDEEP
12288:K0kBuHsZfYLyB9SqoKumDXh1al+hte5+tAL7LwOJ50UWpGtJxK:/HnqoKpXLaUygKPwob
Checks for missing Authenticode signature.
resource |
---|
malware.exe |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
ExitProcess
FreeLibrary
GetModuleHandleW
GetVersionExW
lstrcmpiA
GetProcAddress
DeleteFileA
VirtualProtect
GetCurrentProcess
GetCurrentThreadId
GetTickCount
lstrcpyW
lstrlenW
wsprintfW
CPlApplet
DllCanUnloadNow
DllGetClassObject
DllGetClassObjectEx
DllRegisterServer
DllRegisterServerEx
DllUnregisterServer
DllUnregisterServerEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE