CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
6cd1250417e93b9d515eada0530a1cfcbb3f2a838b236525d0cb8eb9d7a98235.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6cd1250417e93b9d515eada0530a1cfcbb3f2a838b236525d0cb8eb9d7a98235.dll
Resource
win10v2004-20240802-en
General
-
Target
6cd1250417e93b9d515eada0530a1cfcbb3f2a838b236525d0cb8eb9d7a98235
-
Size
78KB
-
MD5
9029180dc0b6bf5d7554233370794463
-
SHA1
5c86590c49aba83930b672a7cd42d676a5e18bf5
-
SHA256
6cd1250417e93b9d515eada0530a1cfcbb3f2a838b236525d0cb8eb9d7a98235
-
SHA512
6094c1d6e0b736b24350f8f073e12ea562f32ecb5896a3705260f5eec26019b5c7e5a13a612d2bbacdea7e8fb2d4ab7f0fbfb03237a86678b236a62bf51629bc
-
SSDEEP
1536:mW+L+w3CAiFZ7wwjeIPgKUvpUYtOEuTysop2axJRXB4/OBVJJ1GG1KOGVOkOWWzZ:mW+L+w3CAiz7ucQRXuMXYOLWOwake
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cd1250417e93b9d515eada0530a1cfcbb3f2a838b236525d0cb8eb9d7a98235
Files
-
6cd1250417e93b9d515eada0530a1cfcbb3f2a838b236525d0cb8eb9d7a98235.dll windows:5 windows x86 arch:x86
00c3836c8d343a76324909870b97f087
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
comctl32
PropertySheetW
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
memmove
strncmp
vfprintf
wcslen
wcsncmp
user32
GetParent
LoadIconW
LoadStringW
SendDlgItemMessageW
SendMessageW
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 952B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rossym Size: 19KB - Virtual size: 18KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ