Behavioral task
behavioral1
Sample
2484-34-0x0000000000400000-0x000000000045A000-memory.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
2484-34-0x0000000000400000-0x000000000045A000-memory.exe
Resource
win10v2004-20231020-en
General
-
Target
2484-34-0x0000000000400000-0x000000000045A000-memory.dmp
-
Size
360KB
-
MD5
ca7da57889db60028f987f080ae199a1
-
SHA1
e911da2037e4e7b898ad71c5334b57199d7b5105
-
SHA256
92ea8924199e77c3f3803303f1e6f1789caa8fea02f48852e4cb50869d1a8146
-
SHA512
d7ba9ba2c1b979b2aea089509ada3f144d8a4fe3120a27e674e78aec2f962fcf7e85b0187e5a20a9c3dcb35b35e8ac61ef8c357ce48c8aa5d2bf02c34aecc2e2
-
SSDEEP
6144:WFDWj5H++cvEDZ4sLPg3G6g+PMc8Hwy5rihAobEbhx0Qnk:WFqVB5mR8uhAoNY
Malware Config
Extracted
eternity
http://izrukvro5khcol3z7cvvdq3akeunlod2gshgn7ppo3a4jvse3z5hpiyd.onion
Signatures
-
Eternity family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2484-34-0x0000000000400000-0x000000000045A000-memory.dmp
Files
-
2484-34-0x0000000000400000-0x000000000045A000-memory.dmp.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 331KB - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ