Behavioral task
behavioral1
Sample
a591e8d5b6ebe119919fe949d09e56224547f0cc511f21244c7cf77447e1f071.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a591e8d5b6ebe119919fe949d09e56224547f0cc511f21244c7cf77447e1f071.exe
Resource
win10v2004-20230220-en
General
-
Target
18b8eaaca17c55a378a88b6767b14d7c.bin
-
Size
144KB
-
MD5
9c5f5abba2149d26fdf184e9dee1288b
-
SHA1
872366daff2ca54cb61914f2f82a14c653c4f15a
-
SHA256
fe6b05d5b6cd0b3737fabb0db17ebdbd83719c963fe87749e18d0d9b8ba5eca9
-
SHA512
440ac779b6df04ff52a7d632c20cb85f4a2fcba645d87c730872a7bc3ca536cf53758fdda21b78b7ac4c26f06caa349fd8d4bd37f3c0d682f6bd6d610df74c33
-
SSDEEP
3072:OlU7EWY9bLuac3r0/0gEpiKHQqbQWwhnTXjybkk+W3D8bBxru8IV4aKWM:6U77YxCac3re3qUzTXmb1+5Tru8bWM
Malware Config
Signatures
-
Eternity family
Files
-
18b8eaaca17c55a378a88b6767b14d7c.bin.zip
Password: infected
-
a591e8d5b6ebe119919fe949d09e56224547f0cc511f21244c7cf77447e1f071.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ