Behavioral task
behavioral1
Sample
4a1a3e2e68ef0499b404323d2274dd205d274e07486fb5f5322d45bc91638453.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4a1a3e2e68ef0499b404323d2274dd205d274e07486fb5f5322d45bc91638453.exe
Resource
win10v2004-20230915-en
General
-
Target
4a1a3e2e68ef0499b404323d2274dd205d274e07486fb5f5322d45bc91638453
-
Size
1.8MB
-
MD5
d1ffd0ba2513053f93441c5d94f50a12
-
SHA1
8be6fc526a3160dac6ec8b77f31928e41d70d235
-
SHA256
4a1a3e2e68ef0499b404323d2274dd205d274e07486fb5f5322d45bc91638453
-
SHA512
93b738f4ff55470b7c71613ef640b7c75493c2c6f8e3ec0bfa4fcff8b400e46f3159e8943f429424e5e2e530b77a6c01dc09d30ca9b677dc731fc03c8c9b19d5
-
SSDEEP
49152:zvYE24PZjPHHUF1x+XVqu88o4Fx1G8jGbgTUj:TRX8xkVquXoI1G8jmOUj
Malware Config
Signatures
-
Eternity family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a1a3e2e68ef0499b404323d2274dd205d274e07486fb5f5322d45bc91638453
Files
-
4a1a3e2e68ef0499b404323d2274dd205d274e07486fb5f5322d45bc91638453.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ