Behavioral task
behavioral1
Sample
6f58b413b2d7d36f56b46f4fa119806b9f3f335c90bdb5fb2a7313bb15c61748.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6f58b413b2d7d36f56b46f4fa119806b9f3f335c90bdb5fb2a7313bb15c61748.exe
Resource
win10v2004-20230220-en
General
-
Target
0b2226a16d3c7e938cbe1e1c3133fddc.bin
-
Size
198KB
-
MD5
c36851c45fa4e7a2d040a0d709089364
-
SHA1
44a914b07185538ade799b328146d9c2b018edbd
-
SHA256
2eaf826b2e3ec790969d94b4c79e606aa2ddc029588d6fc54e249ec8b4a62fcc
-
SHA512
dab13a835d4a20d588e0311f5c5ca4672b59eba36a9897401a109ad9ef3be0a0fcc8ebeeb6113f1785082e2fab385021b08604fb181ab6ac758a7624a56f4169
-
SSDEEP
6144:AcIJs1kNZgvY4z7jfjbpqSCXqNvTwgZWT9gtucf8u5D:y+kNyvY4nlqSDNr/S9Bcfhd
Malware Config
Signatures
-
Eternity family
Files
-
0b2226a16d3c7e938cbe1e1c3133fddc.bin.zip
Password: infected
-
6f58b413b2d7d36f56b46f4fa119806b9f3f335c90bdb5fb2a7313bb15c61748.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ