Behavioral task
behavioral1
Sample
132b551a1e506ae3d496639a001fc0bf657484a7.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
132b551a1e506ae3d496639a001fc0bf657484a7.exe
Resource
win10v2004-20231127-en
General
-
Target
132b551a1e506ae3d496639a001fc0bf657484a7
-
Size
338KB
-
MD5
3938dad69b5687b89ff8883b2a51a4db
-
SHA1
132b551a1e506ae3d496639a001fc0bf657484a7
-
SHA256
60d3a19ed683bdfbb61985e1cd8ee97f112d8a1f6a14f308aabf8e5432ee9ac2
-
SHA512
b5b2bef4c55abd334a89b363ae2f283875f91e7f8eff5055c87f0225af3c35d4c707b2689bde4de083e96699301636ed50419b2e0478a394156a729555b700a8
-
SSDEEP
6144:ovMg+PRW1kLcuskfuauSOqhoQLwcTApPT2fI8y6DUxb3kWQWPY40b3sd:ovMg+PRW1kY8wcTApPkI8KlxQWPYw
Malware Config
Extracted
eternity
http://izrukvro5khcol3z7cvvdq3akeunlod2gshgn7ppo3a4jvse3z5hpiyd.onion
Signatures
-
Eternity family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 132b551a1e506ae3d496639a001fc0bf657484a7
Files
-
132b551a1e506ae3d496639a001fc0bf657484a7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 335KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ