Behavioral task
behavioral1
Sample
18d902fa2b6f826aedf4964c67ebec5b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
18d902fa2b6f826aedf4964c67ebec5b.exe
Resource
win10v2004-20230220-en
General
-
Target
18d902fa2b6f826aedf4964c67ebec5b.exe
-
Size
12KB
-
MD5
18d902fa2b6f826aedf4964c67ebec5b
-
SHA1
bc822cab45a8088cba12c62a3433a15c9c29fb6a
-
SHA256
4c280217c29415fedd3c2e1011bf578addd9b5da54addca475e6932ac64bb09b
-
SHA512
c919a81c75483c09c54dfa1f3e9788d1eccea5b030c4876346c5c94391d7b06b2f721fb52cbacdae6ec5549c437fd20c737c387bb971fae66ec8a66314d3d419
-
SSDEEP
192:rV00NU+WelU/5/1PbvgJAD23QB3g3UvVv3f9Bmf11utWv:B2J1jw3M3V9v3FBK/v
Malware Config
Signatures
-
Eternity family
Files
-
18d902fa2b6f826aedf4964c67ebec5b.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ