Static task
static1
Behavioral task
behavioral1
Sample
EDD.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
EDD.exe
Resource
win10v2004-20220812-en
General
-
Target
EDD.exe
-
Size
1.0MB
-
MD5
634ca67a67b2e1197f54c289f10fc78b
-
SHA1
5ff0d190db9a91b1a248d2ede68231f63bd995cf
-
SHA256
2d22ca8b9903fccf7e1408139e3241b9af152065ec3810ba1166d2f6b1597ef1
-
SHA512
587f70455f0747572e52c45eb3d531d76caadba43e027c347fb86216098ec37e434b7bf24c4a2bb87435eef798f3efeebc9304b755e577b395b2a98de849c448
-
SSDEEP
24576:DmywXOEXmPEm1gKL2rtHbdl7pv3x9GUdrxN5IC54TWMxA:DmXOEXmPEm1/iFL7pv3nGqtgi/
Malware Config
Signatures
Files
-
EDD.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ