Static task
static1
Behavioral task
behavioral1
Sample
edeeb439282c5442be6b5f1dede33d46.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
edeeb439282c5442be6b5f1dede33d46.exe
Resource
win10v2004-20240802-en
General
-
Target
edeeb439282c5442be6b5f1dede33d46.exe
-
Size
278KB
-
MD5
edeeb439282c5442be6b5f1dede33d46
-
SHA1
49ee5e7e890bc5ce9513e898c35442aeb28dc11b
-
SHA256
07b8972ecab0d6a49d2319054d81a2b239a107b9f746f204bd47ed26f1cdafe9
-
SHA512
d6b33e3202638df7a56070172c2662876c75dbbc946124b82d30176936e5f5f67924a99eb5fc28fec1d3871d2abd9f76fd433d8ec4b403bd4f0e34eb66547ff1
-
SSDEEP
6144:wDLL/R3bfrXuvWH9ZT0kf7sIi4ZYmRJaUS:wD9rTuvWHtW3F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edeeb439282c5442be6b5f1dede33d46.exe
Files
-
edeeb439282c5442be6b5f1dede33d46.exe.exe windows:5 windows x86 arch:x86
190e11c840566a4470035f661fce6f44
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FillConsoleOutputCharacterA
SearchPathW
SetPriorityClass
GetConsoleAliasesLengthW
CopyFileExW
GetNumaProcessorNode
GetConsoleAliasExesLengthA
InterlockedIncrement
OpenJobObjectA
QueryDosDeviceA
GetComputerNameW
CallNamedPipeW
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
GetUserDefaultLangID
GetEnvironmentStrings
LoadLibraryW
GetConsoleMode
Sleep
CopyFileW
WriteConsoleOutputA
HeapDestroy
GetFileAttributesA
GlobalFlags
GetBinaryTypeA
GetModuleFileNameW
GetStartupInfoW
GetCommandLineW
DisconnectNamedPipe
CreateDirectoryA
InterlockedExchange
GetLastError
GetProcAddress
SetStdHandle
SearchPathA
BuildCommDCBW
OpenWaitableTimerW
LocalAlloc
WritePrivateProfileStringA
FindAtomA
FoldStringW
WaitForMultipleObjects
GetDefaultCommConfigA
SetConsoleTitleW
GetModuleHandleA
GetShortPathNameW
SetCalendarInfoA
GlobalReAlloc
SetFileAttributesW
GetVolumeInformationW
CreateFileA
DebugActiveProcess
HeapFree
HeapAlloc
MultiByteToWideChar
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
FlushFileBuffers
ReadFile
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
user32
SetFocus
GetUserObjectInformationA
advapi32
RegCreateKeyA
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ