Behavioral task
behavioral1
Sample
2088-2-0x0000000000400000-0x000000000045A000-memory.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
2088-2-0x0000000000400000-0x000000000045A000-memory.exe
Resource
win10v2004-20231023-en
General
-
Target
2088-2-0x0000000000400000-0x000000000045A000-memory.dmp
-
Size
360KB
-
MD5
0152e96198c4ca9ec1822518852db8a9
-
SHA1
7e8dc014dc2407f9123dfb9c0c57e0b9bc16ab6c
-
SHA256
9fb1a3131e52d5f3b5c4a35d971204c90ba890e5476867e877eaa25710fe1d48
-
SHA512
942c45d4e9ed03e952465afe83d7c9de79782d3abaef4d477e64c0d826ed1f0eb5be61494be6779a59451cb1637c11c0248ab447dc0e333439da5552ad33ada9
-
SSDEEP
6144:6D0JTJXq+BxwBZ1gB3tT/VI8wxj4yXFZ0OtmcbHB9/wYJW6G:ZTJXvcZ1O1/V7wxjPWO/L/L86
Malware Config
Extracted
eternity
http://izrukvro5khcol3z7cvvdq3akeunlod2gshgn7ppo3a4jvse3z5hpiyd.onion
Signatures
-
Eternity family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2088-2-0x0000000000400000-0x000000000045A000-memory.dmp
Files
-
2088-2-0x0000000000400000-0x000000000045A000-memory.dmp.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 334KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ