IsSupportEPMessage
Static task
static1
Behavioral task
behavioral1
Sample
e_di08te.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e_di08te.dll
Resource
win10v2004-20240412-en
General
-
Target
5566ff2941a59c9138b5da3e58372a640ebc81536006f8ac9a4b5ddb4f8f7e60
-
Size
309KB
-
MD5
e820093ec4044deda45f747bdd137795
-
SHA1
82492899b8e202b62fb843b7f81ed57132ecef1a
-
SHA256
5566ff2941a59c9138b5da3e58372a640ebc81536006f8ac9a4b5ddb4f8f7e60
-
SHA512
e2f419b213845020c072119e2cb50d57ca84b9e5defa6e90020ae3e290399d063559d1b42fc361d5222ef4e704be385b9308dc19740230931f6dc6c1fa0e4c9a
-
SSDEEP
6144:QNmrL9ft9bBnbX7Twqr/nJ+O6zkF+8gtgf97+ITYpYsvtVVUTTpHqV:zrL9DbBnbXvDrcO6L8bfPkYsvtvUHBqV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e_di08te.dll
Files
-
5566ff2941a59c9138b5da3e58372a640ebc81536006f8ac9a4b5ddb4f8f7e60.cab
-
e_di08te.dll.dll windows:4 windows x86 arch:x86
9de9f5e89f444301fcf52d38cf031648
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenA
MulDiv
lstrcpyA
GlobalUnlock
GetCurrentThreadId
GlobalHandle
GlobalLock
GlobalFree
GlobalAlloc
lstrcmpA
user32
SetWindowLongA
LoadBitmapA
UnregisterClassA
LoadCursorA
RegisterClassA
DrawTextA
wsprintfA
DrawFocusRect
GetSysColor
CallNextHookEx
SetWindowsHookExA
GetParent
SendMessageA
SetTimer
KillTimer
UnhookWindowsHookEx
ReleaseCapture
GetCursorPos
GetWindowRect
PtInRect
SetCapture
RedrawWindow
GetFocus
SetFocus
GetDC
GetClientRect
ReleaseDC
GetClassNameA
GetWindowLongA
BeginPaint
EndPaint
DefWindowProcA
CopyRect
gdi32
SetWindowOrgEx
DeleteDC
GetDeviceCaps
SelectPalette
BitBlt
DeleteObject
CreateCompatibleBitmap
SelectObject
Rectangle
CreatePen
RealizePalette
CreatePalette
GetObjectA
PatBlt
CreateBitmap
CreatePatternBrush
Polygon
SaveDC
SetGraphicsMode
ModifyWorldTransform
SetViewportOrgEx
DPtoLP
CreateCompatibleDC
CreateFontIndirectA
RestoreDC
GetTextExtentPoint32A
GetTextMetricsA
LPtoDP
SetBkColor
SetTextColor
MoveToEx
LineTo
CreateSolidBrush
Exports
Exports
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ