Static task
static1
Behavioral task
behavioral1
Sample
EasyEditUI.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
EasyEditUI.exe
Resource
win10v2004-20221111-en
General
-
Target
EasyEditUI.exe
-
Size
1.3MB
-
MD5
47062c16453603ede92116c07e9d6002
-
SHA1
d12cd687da4675bc197ad52955784fc7a75b2ff7
-
SHA256
8c16a2ec5557efa34f58502ad8832a30f7b9dedfc174025ac748a62ea5180dca
-
SHA512
7994f7ec7d9c72a4e37ad132ebef07c23dfa778f3f795e05fa6f172c9b9f29d894bca7eac5f65aad87488461658cfaaf46e521ed46c1ae3c2b1283ecd09330c5
-
SSDEEP
3072:ntcqNXyWLdmbx/q00000dWC+SVm00j1YERTw2X+69AxE+if+NX+69AxE+if+V+ii:HbsbMEqYERT3T9n7CT9n7+7
Malware Config
Signatures
Files
-
EasyEditUI.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ