D:\Desktop\EdgeView\epltest\edgeview.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0a18af96d5cf4ff04cabb12eb343a356f3e76a20114e1326c31c7872700ab8d1.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a18af96d5cf4ff04cabb12eb343a356f3e76a20114e1326c31c7872700ab8d1.dll
Resource
win10v2004-20240802-en
General
-
Target
0a18af96d5cf4ff04cabb12eb343a356f3e76a20114e1326c31c7872700ab8d1
-
Size
832KB
-
MD5
b23b6f09d099d24ebe2b9e1ad1c61699
-
SHA1
1877c6d79d44e4f710e0abe5c2b9d5d852a415f1
-
SHA256
0a18af96d5cf4ff04cabb12eb343a356f3e76a20114e1326c31c7872700ab8d1
-
SHA512
021ed447c5eb5a4731f7092d380fb45e2e87b08d178d2b0d49091d8227299b3a77affba3a85da2cb5f8757878996c1d55273a7fe49d6824df7d43ac685bfd174
-
SSDEEP
24576:K5b4YFrvKDdSZGM/02vhSMXlohPnma0J:a6dSZGunKnma0J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a18af96d5cf4ff04cabb12eb343a356f3e76a20114e1326c31c7872700ab8d1
Files
-
0a18af96d5cf4ff04cabb12eb343a356f3e76a20114e1326c31c7872700ab8d1.dll windows:6 windows x86 arch:x86
ab1be73add9028f517ec60b98bc8b695
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
shlwapi
ord12
kernel32
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleHandleW
HeapAlloc
VirtualProtectEx
GetProcessHeap
HeapFree
GetModuleFileNameW
VirtualQuery
SetUnhandledExceptionFilter
GetFileAttributesW
CreateFileW
CloseHandle
OutputDebugStringA
OutputDebugStringW
GetProcAddress
LoadLibraryExW
LoadLibraryW
LeaveCriticalSection
GetEnvironmentVariableW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
WriteFile
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
FormatMessageA
GetLastError
SetLastError
HeapSize
FreeLibrary
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LocalFree
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
Sleep
GetCurrentThreadId
GetCPInfoExW
InitOnceComplete
InitOnceBeginInitialize
GetStringTypeW
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
WriteConsoleW
GetSystemTimeAsFileTime
GetCPInfo
IsProcessorFeaturePresent
SetEvent
ResetEvent
CreateEventW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
ExitProcess
GetStdHandle
GetFileType
LCMapStringW
GetLocaleInfoW
user32
TranslateMessage
MoveWindow
MessageBoxW
wsprintfW
SetLayeredWindowAttributes
SetFocus
GetClientRect
GetWindowLongW
DefWindowProcW
PostMessageW
DestroyWindow
CreateWindowExW
RegisterClassExW
SetWindowLongW
RegisterWindowMessageW
GetWindow
ShowWindow
DispatchMessageW
PeekMessageW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventUnregister
EventWriteTransfer
EventSetInformation
EventRegister
RegGetValueW
ole32
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
Exports
Exports
edgeview_CheckRuntime
edgeview_CreateEnvironment
edgeview_MemAlloc
edgeview_MemFree
edgeview_ObjectAddRef
edgeview_ObjectRelease
edgeview_RegisterClass
Sections
.text Size: 490KB - Virtual size: 490KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 254KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ