Static task
static1
Behavioral task
behavioral1
Sample
eclmt326.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
eclmt326.exe
Resource
win10v2004-20231215-en
General
-
Target
3ce36e2927d26edffb192ddb7725cb48
-
Size
122KB
-
MD5
3ce36e2927d26edffb192ddb7725cb48
-
SHA1
43e332ae6c32c4691d41d826cbf3921c39800e12
-
SHA256
e3480d9e288721d386a42a15065f1c25b092f9e7098b5349d5774947a1c62df5
-
SHA512
ab3fa9771908fb1ea60edb2dfe3199c96d423c1d0549c61a9e6f68aad8158742628ccfff5d2cf7d8686dd2077d37dcef5f5ef5be943b1110e0c6446c6a410b1a
-
SSDEEP
3072:X0yjM27TFAwz91ffhusocl3E3VgbXJQ20VQTp8/o248Fn+05/qcdH:XXMepAUjfdl3EK1Q20KTp+tl+0/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/eclmt326.exe
Files
-
3ce36e2927d26edffb192ddb7725cb48.zip
-
MyTheatre.v3.26.WinALL.Incl.Keygen.and.Patch-ECLiPSE/MyTheatre.v3.26.Keygen.zip.zip
-
ECLiPSE.NFO
-
FILE_ID.DiZ
-
eclmt326.exe.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
.ECLiPSE Size: 49KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ECLiPSE Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ECLiPSE Size: 4KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ECLiPSE Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
MyTheatre.v3.26.WinALL.Incl.Keygen.and.Patch-ECLiPSE/eclipse.nfo
-
MyTheatre.v3.26.WinALL.Incl.Keygen.and.Patch-ECLiPSE/file_id.diz