Static task
static1
Behavioral task
behavioral1
Sample
MicrosoftRuntimeComponents.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
MicrosoftRuntimeComponents.exe
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
MicrosoftRuntimeComponents.exe
Resource
win10v2004-20220812-en
General
-
Target
eira.zip
-
Size
1.5MB
-
MD5
0d6a424f41bfa4d706ff7449859e8862
-
SHA1
eae88fa09c19ae95915237906d9a6e96fddefb9f
-
SHA256
43fcbced48b47166f1e3076c6e67a9fa24994777ae13d9420c4865f01292f8b4
-
SHA512
ad539faec6821994dff9a52d700ecff3393248729a536d6f7c76e03c8062878a5e675449290f72c7cfafd07d98767cda2c3568c2df38b150b35e65ec7ea6b32b
-
SSDEEP
24576:YwYpkzWoerv77sRJ1YUqxyFFLeRK012zec6G7ozvJW+VtCVDF4YAVI27K66dUls:YwY577sJPLeYsYeOEzvg+raDGYuIRUls
Malware Config
Signatures
Files
-
eira.zip.zip
Password: z4dY0aN8m1#
-
MicrosoftRuntimeComponents.exe.exe windows x86
Password: z4dY0aN8m1#
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.*mH Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ