Static task
static1
Behavioral task
behavioral1
Sample
ETricks.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ETricks.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
SEHxmpl.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
SEHxmpl.exe
Resource
win10v2004-20220812-en
General
-
Target
deadbc8bcf04fa183e971567c7759399a4609e7b6323639971e355c2486f565a
-
Size
21KB
-
MD5
5d57f66f1fb9cde826c56c7781ddddb6
-
SHA1
6d17f5f9b0ef317ea5fdb7e42350a0aadb971dc5
-
SHA256
deadbc8bcf04fa183e971567c7759399a4609e7b6323639971e355c2486f565a
-
SHA512
ac868c1211d4ebd477e7b9beb8f6a80494bd34a5d3385224be848dba3319aebb6756991a958efe12d8f2243965ead03dc9f44b68e5545d1403b00b5c99ad3d04
-
SSDEEP
384:ivcc8ewlqn5EnLocDPjVj2kqtC538CJUaQoAwDXADS3uvJ4UvQb6SG6PnRXDE1G:i912n8cDx2kl5kanNDXhebQbJHDEg
Malware Config
Signatures
Files
-
deadbc8bcf04fa183e971567c7759399a4609e7b6323639971e355c2486f565a.zip
-
ETricks.zip.zip
-
ETricks.asm
-
ETricks.def
-
ETricks.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 512B - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ETricks.inc
-
KnlxHndl.asm
-
SEH.inc
-
SEHinASM.txt
-
SEHxmpl.asm
-
SEHxmpl.def
-
SEHxmpl.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 512B - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
owl-seh.zip.zip