Overview
overview
3Static
static
3ets606.v1....6C.exe
windows7-x64
ets606.v1....6C.exe
windows10-2004-x64
ets606.v1....6N.exe
windows7-x64
1ets606.v1....6N.exe
windows10-2004-x64
1ets606.v1....ls.dll
windows7-x64
1ets606.v1....ls.dll
windows10-2004-x64
1ets606.v1....el.dll
windows7-x64
1ets606.v1....el.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ets606.v1.05/crack/ETS6C.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
ets606.v1.05/crack/ETS6C.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
ets606.v1.05/crack/ETS6N.exe
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
ets606.v1.05/crack/ETS6N.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
ets606.v1.05/crack/Knx.Ets.UserControls.dll
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
ets606.v1.05/crack/Knx.Ets.UserControls.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
ets606.v1.05/crack/Knx.Ets.ViewModel.dll
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
ets606.v1.05/crack/Knx.Ets.ViewModel.dll
Resource
win10v2004-20230915-en
General
-
Target
ets606.v1.05.zip
-
Size
48.8MB
-
MD5
153c9f4d0dadd150d7061134af23fafe
-
SHA1
a558ec4e21a4de4d1f21debd3d6da8000b7f43a0
-
SHA256
18a83e9e6b0e6edd6d0dc9ef2ac065b2c422232a7925085e1ab4bb748a529c3b
-
SHA512
9157314093f43d5aa6ee80e772082b08af5c2da4e421a2e91c226701f79e18473f1d02b19179d48fdb6ee0b2bdd8b3092149f03332101845806d2dfb9b8f808a
-
SSDEEP
1572864:p2c318Vuexbsr9FKAr1jjPIWL04O05mX8BPSj:Ai16nxbsr9l1P7c0QX8BKj
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/ets606.v1.05/crack/ETS6C.exe unpack001/ets606.v1.05/crack/ETS6N.exe unpack001/ets606.v1.05/crack/Knx.Ets.UserControls.dll unpack001/ets606.v1.05/crack/Knx.Ets.ViewModel.dll
Files
-
ets606.v1.05.zip.zip
-
ets606.v1.05/crack/ETS6C.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 56.7MB - Virtual size: 56.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ets606.v1.05/crack/ETS6N.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 56.7MB - Virtual size: 56.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ets606.v1.05/crack/Knx.Ets.UserControls.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ets606.v1.05/crack/Knx.Ets.ViewModel.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 9.7MB - Virtual size: 9.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1022B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ