9ce9e10ec1fff3626b9d0074f0524b5648c624bb48bc0876d9b7e01043ad3c2f

Sharing

Copy URL Twitter E-mail

General

Target

9ce9e10ec1fff3626b9d0074f0524b5648c624bb48bc0876d9b7e01043ad3c2f
Size

832KB
MD5

68befb09577dc2532f7edcd63ce51b9c
SHA1

902df7ffcfe35f0d22bcb9d6355fb0b08ca25069
SHA256

9ce9e10ec1fff3626b9d0074f0524b5648c624bb48bc0876d9b7e01043ad3c2f
SHA512

bd407cafafdeca7ea2a2345a4cfbffbd98329a4c7c8dedc32bccf17ebdc5217f804b6cdc37464078772b089f7ed47e69247e257346360732e9af349cae333161
SSDEEP

24576:K5b4YFrvKDdSZGML02vhSMXlohTnma0J:a6dSZGOnSnma0J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ce9e10ec1fff3626b9d0074f0524b5648c624bb48bc0876d9b7e01043ad3c2f

Files

9ce9e10ec1fff3626b9d0074f0524b5648c624bb48bc0876d9b7e01043ad3c2f
.dll windows:6 windows x86 arch:x86

ab1be73add9028f517ec60b98bc8b695

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Desktop\EdgeView\epltest\edgeview.pdb

Imports

shlwapi

ord12

kernel32

DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleHandleW
HeapAlloc
VirtualProtectEx
GetProcessHeap
HeapFree
GetModuleFileNameW
VirtualQuery
SetUnhandledExceptionFilter
GetFileAttributesW
CreateFileW
CloseHandle
OutputDebugStringA
OutputDebugStringW
GetProcAddress
LoadLibraryExW
LoadLibraryW
LeaveCriticalSection
GetEnvironmentVariableW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
WriteFile
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
FormatMessageA
GetLastError
SetLastError
HeapSize
FreeLibrary
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LocalFree
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
Sleep
GetCurrentThreadId
GetCPInfoExW
InitOnceComplete
InitOnceBeginInitialize
GetStringTypeW
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
WriteConsoleW
GetSystemTimeAsFileTime
GetCPInfo
IsProcessorFeaturePresent
SetEvent
ResetEvent
CreateEventW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
ExitProcess
GetStdHandle
GetFileType
LCMapStringW
GetLocaleInfoW

user32

TranslateMessage
MoveWindow
MessageBoxW
wsprintfW
SetLayeredWindowAttributes
SetFocus
GetClientRect
GetWindowLongW
DefWindowProcW
PostMessageW
DestroyWindow
CreateWindowExW
RegisterClassExW
SetWindowLongW
RegisterWindowMessageW
GetWindow
ShowWindow
DispatchMessageW
PeekMessageW

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventUnregister
EventWriteTransfer
EventSetInformation
EventRegister
RegGetValueW

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal

Exports

Exports

edgeview_CheckRuntime
edgeview_CreateEnvironment
edgeview_MemAlloc
edgeview_MemFree
edgeview_ObjectAddRef
edgeview_ObjectRelease
edgeview_RegisterClass

Sections

.text
Size: 490KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab1be73add9028f517ec60b98bc8b695

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

user32

advapi32

ole32

Exports

Exports

Sections

.text Size: 490KB - Virtual size: 490KB

.rdata Size: 254KB - Virtual size: 253KB

.data Size: 55KB - Virtual size: 58KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 30KB - Virtual size: 29KB

.text
Size: 490KB - Virtual size: 490KB

.rdata
Size: 254KB - Virtual size: 253KB

.data
Size: 55KB - Virtual size: 58KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 30KB - Virtual size: 29KB