Static task
static1
Behavioral task
behavioral1
Sample
msedge_proxy.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
msedge_proxy.exe
Resource
win10v2004-20231215-en
General
-
Target
msedge_proxy.exe
-
Size
1.4MB
-
MD5
4c4e36361cd1d4faa3592d91eb33368d
-
SHA1
5fcf677f4f42ac5e7ed0597ef0bfb8ba3798d5c9
-
SHA256
f97ae9c2b1bafd3f61a1953aff466ebef2762f48a51f637b3f34e08a4c2fc00f
-
SHA512
054a20b56a13bbbdc4df1bdc22a841bf088e5d2df67f62413f4585c9379e9888a87d7492af62f37a1fa61d90ba1749b6c06a87a12b53118cbd98de2192da3043
-
SSDEEP
24576:KvoW0hmXWuOGT2uLwXEU/EnM6niGv6DrPbZGsCIKNKtFAISJNxIPiP7NYFz:yoW0hmGuOGyukXEvnMbm6DrPPCI2d7KB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource msedge_proxy.exe
Files
-
msedge_proxy.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ