eternity | HEUR-Trojan-PSW[.]MSIL[.]Growtopia[.]gen-ae1a5efe5dd100b08fe84ec75c0e8c803a52b94d38e452d7c224347ec965ba01[.]exe | Triage

Sharing

General

Target

HEUR-Trojan-PSW.MSIL.Growtopia.gen-ae1a5efe5dd100b08fe84ec75c0e8c803a52b94d38e452d7c224347ec965ba01.exe
Size

2.1MB
MD5

4f35efef5f7481d886a65f523698d630
SHA1

f3747d9db681bb54098f796a63fe5910f03d4846
SHA256

ae1a5efe5dd100b08fe84ec75c0e8c803a52b94d38e452d7c224347ec965ba01
SHA512

064d7378308d3be4b823a7ca9651082aab5e05f51d74c579fb5ea4d0d89d6b2564c43f4fa6c6fe1e2b8e3f9f3d4d8668857497e868deef32f1619235012f05a1
SSDEEP

12288:kTEYAsROAsrt/uxduo1jB0Y96qyrm5MQc4HFag/CvjwpAaOzAcSlgieQsGQi6VE+:kwT7rC6qcOMQc4HFRKbwODSlgieuE

Score

10^/10

stealer eternity

Malware Config

Signatures

Detects Eternity stealer 1 IoCs

resource	yara_rule
sample	eternity_stealer

Eternity family
eternity

Files

HEUR-Trojan-PSW.MSIL.Growtopia.gen-ae1a5efe5dd100b08fe84ec75c0e8c803a52b94d38e452d7c224347ec965ba01.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 686KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.eter0
Size: 863KB - Virtual size: 863KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.eter1
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ