C:\Users\Marian\Desktop\Aeldra\ProjectA-main\Client\Client\bin_aeldra_dev.pdb
Static task
static1
Behavioral task
behavioral1
Sample
53ebd3f6ebe975474eee28897432aea5aad699f91da77bd80ca3f25b6c4fdbdd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
53ebd3f6ebe975474eee28897432aea5aad699f91da77bd80ca3f25b6c4fdbdd.exe
Resource
win10v2004-20240226-en
General
-
Target
53ebd3f6ebe975474eee28897432aea5aad699f91da77bd80ca3f25b6c4fdbdd
-
Size
8.4MB
-
MD5
c2926feeff17ed0009963a6585b0ada4
-
SHA1
0b9e3095f229923a3b86077f608ecfbc2bdde416
-
SHA256
53ebd3f6ebe975474eee28897432aea5aad699f91da77bd80ca3f25b6c4fdbdd
-
SHA512
d41c722b4401adca1a90a2fdde829398ace781e27175ba37ebdaef3d9e267ab280931791bc954edee8a7cd5c622e2c6c720dc874a2fc84cb899f1885ee5b8f43
-
SSDEEP
98304:WuN4F69jfBMlRDUehWdKp+RlmJaukxkv9nDwHEYLN/ifdjWK2djkNR1+:P4F6wlid0+aJfG0fqMf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53ebd3f6ebe975474eee28897432aea5aad699f91da77bd80ca3f25b6c4fdbdd
Files
-
53ebd3f6ebe975474eee28897432aea5aad699f91da77bd80ca3f25b6c4fdbdd.exe windows:6 windows x86 arch:x86
554732b87a17eb10c74f138d1bf300af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetStdHandle
SetFileAttributesW
FlushFileBuffers
HeapReAlloc
GetTimeZoneInformation
SetConsoleCtrlHandler
MoveFileExW
DeleteFileW
GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
DuplicateHandle
GetFileAttributesExW
CreateDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableW
GetStdHandle
GetModuleFileNameW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetFileInformationByHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
GetFullPathNameW
GetDriveTypeW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
RaiseException
GetThreadTimes
SetLastError
FindNextFileW
FindFirstFileW
GetCurrentDirectoryW
SetFilePointerEx
HeapFree
HeapAlloc
GetTickCount
FindFirstFileExA
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
TerminateProcess
UnhandledExceptionFilter
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
CompareStringEx
CreateSymbolicLinkW
GetVersionExA
GetModuleHandleW
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineW
GetEnvironmentStringsW
GetLogicalDriveStringsA
GetCurrentDirectoryA
lstrlenA
GetPrivateProfileStringA
InitOnceComplete
InitOnceBeginInitialize
HeapSize
FreeEnvironmentStringsW
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
OutputDebugStringW
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
IsProcessorFeaturePresent
GetDriveTypeA
CreateThread
GetStartupInfoA
GetModuleFileNameA
GetSystemInfo
CreateProcessA
GetLastError
FindNextFileA
FindFirstFileA
FindClose
GetCommandLineA
MultiByteToWideChar
SetFileAttributesA
GetProcessId
GetCurrentProcess
Sleep
GetVolumeInformationA
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
SleepConditionVariableCS
InitOnceExecuteOnce
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetTempPathW
SetFileInformationByHandle
LCMapStringEx
DecodePointer
EncodePointer
GetLocaleInfoEx
LocalFree
InitializeCriticalSectionEx
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
QueryPerformanceFrequency
GetStringTypeW
FormatMessageA
GetNativeSystemInfo
GetExitCodeThread
GetCurrentThreadId
SwitchToThread
WaitForSingleObjectEx
FindResourceW
FindResourceA
SizeofResource
LoadResource
LockResource
CreateFileW
InterlockedDecrement
GetProcessHeap
HeapValidate
InterlockedIncrement
QueryPerformanceCounter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateSemaphoreA
SetThreadPriority
WaitForSingleObject
ReleaseSemaphore
GetLocaleInfoA
CompareStringA
WideCharToMultiByte
lstrlenW
GlobalLock
GlobalUnlock
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
WriteFile
SetFilePointer
ReadFile
OutputDebugStringA
WinExec
GetModuleHandleA
GetCurrentThread
SetUnhandledExceptionFilter
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
CloseHandle
GetFileSize
CreateFileA
GetTempFileNameA
GetTempPathA
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
AllocConsole
RtlCaptureStackBackTrace
GlobalFree
GlobalAlloc
FindFirstFileExW
HeapQueryInformation
SetEndOfFile
SubmitThreadpoolWork
WriteConsoleW
GetSystemDefaultLangID
GetFileInformationByHandleEx
GetComputerNameA
user32
SendMessageA
MessageBoxA
LoadStringA
GetSystemMetrics
ChangeDisplaySettingsA
ReleaseCapture
DefWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
IsWindow
DestroyWindow
MoveWindow
SetFocus
UpdateWindow
GetClientRect
PostQuitMessage
SetWindowPos
GetWindowTextA
GetCursorPos
ScreenToClient
FindWindowA
EnumWindows
GetWindowThreadProcessId
LoadIconA
SystemParametersInfoA
GetKeyState
ShowCursor
SetCursor
DestroyCursor
LoadImageA
SetCursorPos
ClientToScreen
GetAsyncKeyState
FlashWindowEx
ShowWindow
GetCapture
SetCapture
LoadImageW
CreateWindowExW
RegisterClassExW
UnregisterClassW
DefWindowProcW
SendMessageW
GetMonitorInfoA
MonitorFromPoint
CharPrevExA
CharNextExA
CharNextW
GetClipboardData
CloseClipboard
OpenClipboard
GetKeyboardLayoutNameA
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
LoadCursorA
SetRect
AdjustWindowRectEx
GetWindowRect
SetWindowTextA
InvalidateRect
GetMenu
RegisterClassA
ReleaseDC
GetDC
GetWindowLongA
SetWindowLongA
advapi32
GetUserNameA
RegOpenKeyA
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
shell32
ShellExecuteA
SHGetSpecialFolderPathA
ole32
CoInitializeEx
OleUninitialize
OleInitialize
CoGetClassObject
OleSetContainedObject
CoUninitialize
CoCreateInstance
winmm
timeGetDevCaps
timeGetTime
timeBeginPeriod
timeEndPeriod
d3d8
Direct3DCreate8
python27
PyExc_EOFError
PyExc_ValueError
PyDict_New
PyList_SetItem
PyString_FromStringAndSize
PyComplex_FromCComplex
PyFloat_FromDouble
_PyLong_FromByteArray
PyUnicodeUCS2_DecodeUTF8
PyCode_Type
Py_OptimizeFlag
PyDict_SetItem
_PyLong_New
PyExc_StopIteration
PyEval_EvalCode
PyCode_Addr2Line
PyObject_AsCharBuffer
PyImport_AddModule
PyImport_GetMagicNumber
Py_BuildValue
Py_InitModule4
PyErr_SetString
PyExc_RuntimeError
PyInt_AsLong
PyString_FromString
PyMarshal_ReadObjectFromString
PyList_New
PyList_Append
PyModule_AddIntConstant
PyModule_AddStringConstant
PyLong_AsLong
PyTuple_Size
PyDict_GetItemString
_Py_ZeroStruct
_Py_TrueStruct
PyTuple_New
PyTuple_SetItem
PyDict_Next
PyDict_Size
PyImport_ImportModule
PyString_InternFromString
Py_FlushLine
PyObject_GetAttr
PyCallable_Check
PyLong_AsLongLong
PyLong_AsUnsignedLongLong
PyFloat_AsDouble
PyString_AsString
PyErr_Clear
PyErr_BadArgument
PyErr_Print
PyObject_CallObject
PyNumber_Check
_Py_NoneStruct
PyCode_New
PyEval_GetRestricted
PyErr_NoMemory
PyTuple_GetItem
PyErr_Occurred
PyDict_SetItemString
PyModule_GetDict
PyErr_Fetch
Py_SetProgramName
Py_Initialize
Py_Finalize
PyRun_StringFlags
_Py_EllipsisObject
PyEval_SetTrace
PyObject_GetAttrString
PyInt_FromLong
imm32
ImmIsIME
ImmGetContext
ImmNotifyIME
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetIMEFileNameA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
imagehlp
EnumerateLoadedModules
GetTimestampForLoadedLibrary
StackWalk
SymGetLineFromAddr64
SymFromAddr
devil
ilGetInteger
ilGenImages
ilEnable
ilOriginFunc
ilCopyPixels
ilConvertImage
ilBindImage
ilLoad
ilShutDown
ilSave
ilSetPixels
ilTexImage
ilInit
ilActiveImage
ilGetError
ilLoadImage
ilDeleteImages
mss32
_AIL_resume_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_start_3D_sample@4
_AIL_release_3D_sample_handle@4
_AIL_allocate_3D_sample_handle@4
_AIL_sample_volume_pan@12
_AIL_sample_status@4
_AIL_set_sample_loop_count@8
_AIL_set_sample_volume_pan@12
_AIL_end_sample@4
_AIL_resume_sample@4
_AIL_stop_sample@4
_AIL_start_sample@4
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_last_error@0
_AIL_stream_status@4
_AIL_set_stream_loop_count@8
_AIL_stream_volume_levels@12
_AIL_set_stream_volume_levels@12
_AIL_set_3D_sample_file@8
_AIL_start_stream@4
_AIL_close_stream@4
_AIL_set_redist_directory@4
_AIL_shutdown@0
_AIL_startup@0
_AIL_set_3D_orientation@28
_AIL_set_3D_velocity@20
_AIL_set_3D_position@16
_AIL_close_3D_listener@4
_AIL_open_3D_listener@4
_AIL_close_3D_provider@4
_AIL_open_3D_provider@4
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_loop_count@8
_AIL_enumerate_3D_providers@12
_AIL_close_digital_driver@4
_AIL_open_stream@12
_AIL_open_digital_driver@16
_AIL_file_type@8
_AIL_decompress_ADPCM@12
_AIL_decompress_ASI@24
_AIL_WAV_info@8
_AIL_set_file_callbacks@16
_AIL_file_read@8
_AIL_mem_free_lock@4
_AIL_end_3D_sample@4
_AIL_3D_sample_status@4
_AIL_3D_sample_volume@4
_AIL_update_3D_position@8
_AIL_pause_stream@8
_AIL_auto_update_3D_position@8
speedtreert
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
??1SGeometry@CSpeedTreeRT@@QAE@XZ
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?DeleteTransientData@CSpeedTreeRT@@QAEXXZ
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
dinput8
DirectInput8Create
ws2_32
send
inet_addr
htons
connect
socket
htonl
ntohl
ntohs
gethostbyname
gethostname
WSACleanup
__WSAFDIsSet
WSAGetLastError
WSAStartup
ioctlsocket
recv
select
closesocket
setsockopt
ilu
iluScale
iluImageParameter
iphlpapi
GetAdaptersInfo
gdi32
GetTextExtentPoint32A
GetPixel
GetDeviceCaps
GetTextExtentPoint32W
GetCharABCWidthsFloatW
CreateFontIndirectA
TextOutW
CreateDIBSection
SetTextColor
SetDIBitsToDevice
SetBkMode
SetBkColor
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
GetStockObject
EnumFontFamiliesExA
oleaut32
SysFreeString
SysAllocString
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
VariantInit
VariantClear
Sections
.text Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 282KB - Virtual size: 128.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ