Behavioral task
behavioral1
Sample
Eso/eso.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Eso/eso.exe
Resource
win10v2004-20220812-en
General
-
Target
82fdc1c6b69daa744001d3db1f89b80d8b4f29127d58f22f4de962749553abea
-
Size
488KB
-
MD5
92711f993359cee0ccac03dd1a2a9f04
-
SHA1
42ce114712108e74026d388af72d3db0fb3e2347
-
SHA256
82fdc1c6b69daa744001d3db1f89b80d8b4f29127d58f22f4de962749553abea
-
SHA512
f5ffd4ea87d544a1160c35d675f281145c2e8d57c5473b386929c951006d558351877b9e76581ea6ee1b5af3e60ea25b78fc6a2506d9285b44d86d6b31ff1b95
-
SSDEEP
12288:SIaYkRMhr2WKyfFZF5JLb/OAg/wxbiwpOYNkut+8MhUSPEGX:SIal2rPfF5x/dg/wLQYLU8MhBX
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Eso/eso.exe upx
Files
-
82fdc1c6b69daa744001d3db1f89b80d8b4f29127d58f22f4de962749553abea.zip
-
Eso/eso.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 488KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 284KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Eso/eso.ini