Static task
static1
Behavioral task
behavioral1
Sample
edaf98bf203cc0973f059e957fb43ed5.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
edaf98bf203cc0973f059e957fb43ed5.dll
Resource
win10v2004-20231222-en
General
-
Target
edaf98bf203cc0973f059e957fb43ed5.exe
-
Size
160KB
-
MD5
edaf98bf203cc0973f059e957fb43ed5
-
SHA1
7040088e7eb91a84cbb900c0a98ebf1af8ba0c6d
-
SHA256
27ce779dda2db7ef2370b84a4814d1d9a3064bdb5cef036faec7128cc2450ed8
-
SHA512
927c56781b231fffe035e6ce12a965df69f540a71a8ace0ff6585b4f85bb4dccf46c4440e3cd43d0817a31530b60160bbb5e89883d1330b3ebf3bd0c876feb4a
-
SSDEEP
3072:mLnCBDodS33bTcXy8AfaPf9JwsMaAwmy0Nb6kBgrBoJW4bnpekdZKq+HxYz:mDCBEdS7WyPfatqRaAwmy0ZE1yWaouz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edaf98bf203cc0973f059e957fb43ed5.exe
Files
-
edaf98bf203cc0973f059e957fb43ed5.exe.dll windows:4 windows x86 arch:x86
73b0210323f0243eb97c3608e57846ff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetVersionExA
LoadLibraryA
GetModuleFileNameA
IsDebuggerPresent
GetVersion
VirtualAlloc
VirtualProtect
DosDateTimeToFileTime
GetTickCount
GetComputerNameA
GetProcAddress
IsBadReadPtr
user32
GetCursor
IsCharLowerA
IsCharAlphaNumericA
IsMenu
GetForegroundWindow
GetIconInfo
CopyIcon
GetDlgItem
GetTitleBarInfo
GetWindow
GetWindowThreadProcessId
IsZoomed
IsIconic
IsWindowVisible
GetGUIThreadInfo
GetParent
IsChild
SetLastErrorEx
InSendMessage
IsClipboardFormatAvailable
msvcrt
ceil
_adjust_fdiv
malloc
_initterm
free
_memicmp
memchr
_swab
_ultoa
_ltoa
ldiv
_itoa
div
_CItanh
__doserrno
_errno
time
localeconv
frexp
_pctype
_isctype
__mb_cur_max
gdi32
GdiFlush
GetStretchBltMode
ole32
CoGetCurrentProcess
CoRevertToSelf
CoDosDateTimeToFileTime
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ