CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
21e127a52f79842ccc97b009148406e3baee5e3aec1336ddf9ddfc552eb9facf.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21e127a52f79842ccc97b009148406e3baee5e3aec1336ddf9ddfc552eb9facf.dll
Resource
win10v2004-20240426-en
General
-
Target
21e127a52f79842ccc97b009148406e3baee5e3aec1336ddf9ddfc552eb9facf
-
Size
468KB
-
MD5
2a9c7d226010e6ac828414efd6029e9a
-
SHA1
37ce06c3a4b51bfbd63417e3fa69e8dd2a51430d
-
SHA256
21e127a52f79842ccc97b009148406e3baee5e3aec1336ddf9ddfc552eb9facf
-
SHA512
ab110a34ed2560a47bf664b6e484c90314e67af7540a3d51a3d2da637cf5a45d6ee1c9be6b97ed7cef619c7fb08a618311a95a2308fbe27b654609f321d97e37
-
SSDEEP
3072:Uf3qQcwnsXJDtZbRj7+F6aVop6g/RR1gzEB3e8VXvJwSRMdjtnVOS6suSJ7eAorl:UfIR7+2pz14TdADHLLKV6ZKU39gEFZb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21e127a52f79842ccc97b009148406e3baee5e3aec1336ddf9ddfc552eb9facf
Files
-
21e127a52f79842ccc97b009148406e3baee5e3aec1336ddf9ddfc552eb9facf.dll windows:4 windows x64 arch:x64
b4b1d573ca19463f73d7302b2867f4d1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileMappingW
CreateFileW
CreateProcessW
DelayLoadFailureHook
DeleteFileW
GetFileAttributesW
GetFileSize
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
MapViewOfFile
ResolveDelayLoadedAPI
UnmapViewOfFile
WaitForSingleObject
ntdll
_vsnprintf
advapi32
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegGetValueA
RegOpenKeyA
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
bcrypt
BCryptCloseAlgorithmProvider
BCryptCreateHash
BCryptDestroyHash
BCryptFinishHash
BCryptHashData
BCryptOpenAlgorithmProvider
comctl32
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
InitCommonControlsEx
PropertySheetW
comdlg32
GetOpenFileNameW
shell32
ExtractIconExW
ShellExecuteExW
ucrtbase
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
_wgetenv
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcpy
strcspn
strlen
wcschr
wcscmp
wcsncmp
wcstol
user32
DestroyIcon
DialogBoxParamW
EnableWindow
EndDialog
GetDlgItem
GetSystemMetrics
GetWindowTextW
LoadIconW
LoadStringW
MessageBoxW
SendDlgItemMessageW
SendMessageW
SetWindowTextW
wsprintfW
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 4KB - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 453B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 244KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/4 Size: 4KB - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ