Behavioral task
behavioral1
Sample
3528-223-0x000002005F2A0000-0x000002005F2FA000-memory.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3528-223-0x000002005F2A0000-0x000002005F2FA000-memory.exe
Resource
win10v2004-20230703-en
General
-
Target
3528-223-0x000002005F2A0000-0x000002005F2FA000-memory.dmp
-
Size
360KB
-
MD5
e375d67758e8baf83067504480520cd0
-
SHA1
e68829a0c8c95143f4652bcdd909f165aa44d701
-
SHA256
64af292dd8523efbeca9e3c82117465e7e1b436a0961ec5185d88b3b20f8b990
-
SHA512
7d6f856ec142d63a2057d922b5ad8f4b61df79c6dd319de9705ad1d22eb16e4b0648cfb117ce343e332378a5483da0b5effeb48a09e9c1a61edd46b83baf39b2
-
SSDEEP
6144:vzGYxLlUkfuauSOq3AIxPuXICL7Ke/0Md0ToRdlbavvomblRBE:vCYxLpxPuXICzqohavvo8E
Malware Config
Extracted
eternity
http://eternityms33k74r7iuuxfda4sqsiei3o3lbtr5cpalf6f4skszpruad.onion
Signatures
-
Eternity family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3528-223-0x000002005F2A0000-0x000002005F2FA000-memory.dmp
Files
-
3528-223-0x000002005F2A0000-0x000002005F2FA000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 335KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ