Behavioral task
behavioral1
Sample
2ceba6add1d1561f25fb3755098b4340e218ec091a3be5b2d60ab76ebb33672c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2ceba6add1d1561f25fb3755098b4340e218ec091a3be5b2d60ab76ebb33672c.exe
Resource
win10v2004-20230220-en
General
-
Target
018d19a12466283c16f7aaea7b2b7812.bin
-
Size
372KB
-
MD5
3cdd6bf7ed5d5c7e1dba6faa8731f645
-
SHA1
2e1d704206310eae2906f85aa4844710efe1b752
-
SHA256
49baccb39da78001cb693dc0c9a8d88aa7f5e03f201bef690f8be3177b0e3238
-
SHA512
3a0d36b6e1e48d7c5e4079dcda3fe6d71d41e8dd0bed8c0b717909bc3dd1a4f1317efc9fbc80c8ba08649988fd59e6b7b257d8f1bb9ce11269aedd95b39d8f66
-
SSDEEP
6144:jxYTxDt2tmLH4DS70EoOqxuMMFO2C9e4isH+kP3eUKcRGga96ioNjo9a7y:NYTFtOmF0SqAMMc2Oe49+kPOUKYaMxoP
Malware Config
Signatures
-
Eternity family
Files
-
018d19a12466283c16f7aaea7b2b7812.bin.zip
Password: infected
-
2ceba6add1d1561f25fb3755098b4340e218ec091a3be5b2d60ab76ebb33672c.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 448KB - Virtual size: 447KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ