CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
282b46397eb6e1fc0d5bee090a64683b5a146e9a2f93531eb3635851e6f9c98d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
282b46397eb6e1fc0d5bee090a64683b5a146e9a2f93531eb3635851e6f9c98d.dll
Resource
win10v2004-20240508-en
General
-
Target
282b46397eb6e1fc0d5bee090a64683b5a146e9a2f93531eb3635851e6f9c98d
-
Size
78KB
-
MD5
dca36573ad1f039a79bc05efe8e067ae
-
SHA1
f90da44222e633b74d84c9d735a0aef2514c6074
-
SHA256
282b46397eb6e1fc0d5bee090a64683b5a146e9a2f93531eb3635851e6f9c98d
-
SHA512
82eabe3889224c2f8709568e58e0a2df395be7508cb1631218243f7e4b98065ede6364201edc4d12091ffc3a6e4537167e9158659e0064c63eed643b48d461fb
-
SSDEEP
1536:RW+L+w3CAiFZ7wwjTIPgKUvpUYtOEuTysop2axJRXB4/OBVJJ1GG1KOGVOkOWWzZ:RW+L+w3CAiz7DcQRXuMXYOLWOwake
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 282b46397eb6e1fc0d5bee090a64683b5a146e9a2f93531eb3635851e6f9c98d
Files
-
282b46397eb6e1fc0d5bee090a64683b5a146e9a2f93531eb3635851e6f9c98d.dll windows:5 windows x86 arch:x86
00c3836c8d343a76324909870b97f087
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
comctl32
PropertySheetW
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
memmove
strncmp
vfprintf
wcslen
wcsncmp
user32
GetParent
LoadIconW
LoadStringW
SendDlgItemMessageW
SendMessageW
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 952B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rossym Size: 19KB - Virtual size: 18KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ