C:\Users\zizi\Desktop\newupdateloader\x64\Release\Microsoft Edge.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft_Edge.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Microsoft_Edge.exe
Resource
win10v2004-20240412-en
General
-
Target
Microsoft_Edge.exe
-
Size
1.2MB
-
MD5
0cf69a7e896fb50835a1292f5fcce867
-
SHA1
92a5614709e0b41bcb865bdf6f5e2dfdaa778d33
-
SHA256
a6c56022c16b9ac0d2e17f99bbdc7b89f75e53f98793e4a0da394cb44fe38aa1
-
SHA512
b6b2d915e6f383c9cbcb0bdf98788b4656ee10ff0f7be6f5a99a5b452b127358aceeb461fd551b5bcbae9a4fdae3e3bfdf11b6df83fa286a2e32bdb82aaa1485
-
SSDEEP
24576:y+xj3q8Lq2QsHRAM7lGsilgK/uGKF2RnpnlLu+bJtr+QgO7iOwQ:x0sE3npnhuSJtrBgO7iR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Microsoft_Edge.exe
Files
-
Microsoft_Edge.exe.exe windows:6 windows x64 arch:x64
cfbf06a70e23f7108daf2918c7d0868d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetVolumeInformationA
OpenProcess
CreateToolhelp32Snapshot
Sleep
GetFileAttributesA
QueryFullProcessImageNameA
DeleteFileA
Process32Next
CloseHandle
GetSystemInfo
K32EnumProcesses
GetCurrentProcessId
AllocConsole
IsDebuggerPresent
GetComputerNameA
VirtualFree
DeviceIoControl
VirtualAlloc
CreateFileW
GetCurrentThreadId
GetTempPathW
TerminateProcess
InitializeSListHead
GetSystemTimeAsFileTime
GetModuleHandleW
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
Process32First
MoveFileA
QueryPerformanceCounter
VerifyVersionInfoW
FreeLibrary
VerSetConditionMask
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
GetModuleHandleA
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
MultiByteToWideChar
user32
GetForegroundWindow
SetLayeredWindowAttributes
SetFocus
DefWindowProcA
CreateWindowExA
GetMonitorInfoA
DispatchMessageA
GetWindowRect
PostMessageA
MessageBoxA
TranslateMessage
PeekMessageA
PostQuitMessage
GetDesktopWindow
FindWindowA
OpenClipboard
IsChild
ClientToScreen
SetWindowLongA
GetCapture
ShowWindow
WindowFromPoint
SetWindowTextW
SetClipboardData
GetClipboardData
EmptyClipboard
ScreenToClient
EnumDisplayMonitors
MonitorFromWindow
SetWindowPos
GetDC
DestroyWindow
LoadCursorA
GetKeyState
AdjustWindowRectEx
GetWindowLongW
UpdateWindow
SetCapture
CloseClipboard
SetCursor
SetWindowLongW
GetClientRect
UnregisterClassA
RegisterClassExA
BringWindowToTop
GetCursorPos
ReleaseCapture
SetForegroundWindow
IsIconic
SetCursorPos
ReleaseDC
gdi32
GetDeviceCaps
advapi32
RegOpenKeyW
RegDeleteKeyW
RegCreateKeyW
RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegSetKeyValueW
shell32
ShellExecuteA
imm32
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
msvcp140
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
_Cnd_do_broadcast_at_thread_exit
_Query_perf_counter
_Xtime_get_ticks
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateTextureFromFileA
ntdll
RtlCaptureContext
NtQuerySystemInformation
RtlInitUnicodeString
RtlVirtualUnwind
RtlLookupFunctionEntry
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_copy
__current_exception
__std_terminate
__current_exception_context
__C_specific_handler
__std_exception_destroy
strstr
memset
_CxxThrowException
memchr
memcmp
memcpy
memmove
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
_get_stream_buffer_pointers
_fseeki64
fsetpos
ungetc
setvbuf
fgetpos
ftell
fgetc
__acrt_iob_func
fflush
fputc
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
fwrite
fclose
fseek
api-ms-win-crt-string-l1-1-0
strncpy
strcmp
_stricmp
strncmp
api-ms-win-crt-utility-l1-1-0
rand
qsort
srand
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
malloc
_callnewh
api-ms-win-crt-convert-l1-1-0
strtoull
strtol
strtoll
strtod
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_exit
_get_narrow_winmain_command_line
_c_exit
_register_thread_local_exe_atexit_callback
_set_app_type
terminate
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
exit
_invalid_parameter_noinfo_noreturn
_errno
_initterm
system
_beginthreadex
_seh_filter_exe
api-ms-win-crt-time-l1-1-0
_mktime64
_time64
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_wremove
_lock_file
api-ms-win-crt-locale-l1-1-0
localeconv
_configthreadlocale
api-ms-win-crt-math-l1-1-0
sqrtf
cosf
acosf
_dclass
sqrt
ceilf
sinf
__setusermatherr
pow
Sections
.text Size: 487KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 530KB - Virtual size: 533KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ