Behavioral task
behavioral1
Sample
6c4c86f1896f7dd72471bd4d57b250affdd4e309ea30a389bc98ce4ed11d669b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6c4c86f1896f7dd72471bd4d57b250affdd4e309ea30a389bc98ce4ed11d669b.exe
Resource
win10v2004-20230221-en
General
-
Target
ba2d4d68e8fe6873810cf5c8236553c1.bin
-
Size
53KB
-
MD5
ab4ca6b73cc34e62f0c36c58f59d3c99
-
SHA1
6ee708a9f767e105cd88c53cdcecee71e4dd11b0
-
SHA256
808f04dc0249e7cee681baed78968f314aa9304e137ed01c5430a6e1fd44a8e2
-
SHA512
e8f1f00d8aff8dfa19f90052e7846f1cbf047ea7e4216544dfbecbe3534fe3b13c9757aeeeaf6fb9970ed8a645a4db634e1db695be6fb45a128d0b0f11795db5
-
SSDEEP
1536:e5DnxylMhnka2al5HrhQPiSCyOUH3z56DGALxmh:e9ccfPmOUHlt5h
Malware Config
Signatures
-
Eternity family
Files
-
ba2d4d68e8fe6873810cf5c8236553c1.bin.zip
Password: infected
-
6c4c86f1896f7dd72471bd4d57b250affdd4e309ea30a389bc98ce4ed11d669b.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ