Behavioral task
behavioral1
Sample
473f46db582a36a515ecfe8e5868fdb8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
473f46db582a36a515ecfe8e5868fdb8.exe
Resource
win10v2004-20221111-en
General
-
Target
473f46db582a36a515ecfe8e5868fdb8.exe
-
Size
334KB
-
MD5
473f46db582a36a515ecfe8e5868fdb8
-
SHA1
05ce62f525777fba78008f1f173a276e64fce313
-
SHA256
e4be69c1ceba3062ec26e49016f33883b861bcbc78894eae4995f6a3491975ba
-
SHA512
118413909ac5e7b4d2b14a902617e86c96fc03297dd4700cfbb90d733462f1f5f6fcbf7575f52d839009aa4f5e00db57f8e765e1d87b2781aac957bf0b8c9ae5
-
SSDEEP
6144:z0p51/LpL/3Tud/iYQENI5K8ZnjwD9zbwg7DP:z0p51/L9fII5K8ljwh
Malware Config
Extracted
eternity
http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion
1520409355cc42289ae5ea46b6cd828b
Signatures
-
Eternity family
Files
-
473f46db582a36a515ecfe8e5868fdb8.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 331KB - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ