IsSupportEPMessage
Static task
static1
Behavioral task
behavioral1
Sample
e_di0aae.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e_di0aae.dll
Resource
win10v2004-20240412-en
General
-
Target
395b080009bd134e4c7e7d1b730fe09fc881c231c99b5a94a3f80fa779a7b126
-
Size
299KB
-
MD5
5b4ca0eaf981b063eddefc1e2f72cff4
-
SHA1
4be3092eb21cc13b311c7c07fdb2a9f1195cce21
-
SHA256
395b080009bd134e4c7e7d1b730fe09fc881c231c99b5a94a3f80fa779a7b126
-
SHA512
d8af558a1920280876783c0246eac45568384d668d9214367bdef21bd3c14616ec2b71540664673d724ae5f47ac79d8cdf5699cec5c1d529682ff9a7659a6051
-
SSDEEP
6144:a3b2VV+wjsKHDXudmxYVHA2VA0kh+ErlIXD5x55OpBq4C0XB+:a36n+wr+RHhDs8xT2BqJ0x+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e_di0aae.dll
Files
-
395b080009bd134e4c7e7d1b730fe09fc881c231c99b5a94a3f80fa779a7b126.cab
-
e_di0aae.dll.dll windows:4 windows x86 arch:x86
9de9f5e89f444301fcf52d38cf031648
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenA
MulDiv
lstrcpyA
GlobalUnlock
GetCurrentThreadId
GlobalHandle
GlobalLock
GlobalFree
GlobalAlloc
lstrcmpA
user32
SetWindowLongA
LoadBitmapA
UnregisterClassA
LoadCursorA
RegisterClassA
DrawTextA
wsprintfA
DrawFocusRect
GetSysColor
CallNextHookEx
SetWindowsHookExA
GetParent
SendMessageA
SetTimer
KillTimer
UnhookWindowsHookEx
ReleaseCapture
GetCursorPos
GetWindowRect
PtInRect
SetCapture
RedrawWindow
GetFocus
SetFocus
GetDC
GetClientRect
ReleaseDC
GetClassNameA
GetWindowLongA
BeginPaint
EndPaint
DefWindowProcA
CopyRect
gdi32
SetWindowOrgEx
DeleteDC
GetDeviceCaps
SelectPalette
BitBlt
DeleteObject
CreateCompatibleBitmap
SelectObject
Rectangle
CreatePen
RealizePalette
CreatePalette
GetObjectA
PatBlt
CreateBitmap
CreatePatternBrush
Polygon
SaveDC
SetGraphicsMode
ModifyWorldTransform
SetViewportOrgEx
DPtoLP
CreateCompatibleDC
CreateFontIndirectA
RestoreDC
GetTextExtentPoint32A
GetTextMetricsA
LPtoDP
SetBkColor
SetTextColor
MoveToEx
LineTo
CreateSolidBrush
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 977KB - Virtual size: 977KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ