Behavioral task
behavioral1
Sample
ff2092551fecc65e5f564738387d7951.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ff2092551fecc65e5f564738387d7951.exe
Resource
win10v2004-20230220-en
General
-
Target
ff2092551fecc65e5f564738387d7951.exe
-
Size
12KB
-
MD5
ff2092551fecc65e5f564738387d7951
-
SHA1
df6faedb17efd0b8cb01e22af1384d0ca867eca3
-
SHA256
1a346d63b9fd727e74f1bc04b872de7e9a67d9fd48dfddda287d6e7163115648
-
SHA512
386df06bf7601e7714c60d230f976c8d5539940d12644cde781bcc2ec7074197009e660c182160cf439ae979ab3e2a619197b81f5f6545de9264e3c30b6e0e6b
-
SSDEEP
192:4DMsjjG+t4al3TVD0cvJcXEQpZkfd0Me307IjrNOO:QjtljVhcXTZkl0L3hjrNOO
Malware Config
Signatures
-
Eternity family
Files
-
ff2092551fecc65e5f564738387d7951.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 336KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ