eternity | Silviozas-Premium-Proxy-V3[.]85-CRACKED[.]exe | Triage

Sharing

General

Target

Silviozas-Premium-Proxy-V3.85-CRACKED.exe
Size

1.4MB
MD5

1a60fbd63948cb13126d88c0e71f7a6b
SHA1

764b74a28ebd0e657fd7ba8a7f2616fd24d23fd3
SHA256

b0eb1abd740144014dbdc0d1c6f61bcfb5a640ae238506415bb305bafcbbb791
SHA512

b2f3aef0eff8934f72927dcd0b71180013a1eef5d968b3db494a7c946d36655ed6f304d50a90c1895b093c00297ce695b2eae22d0b06386945d8eeaf6c5fa1fd
SSDEEP

12288:WTEYAsROAsrt/uxduo1jB0Y96qIFITgJka3xFD70z0QDiBoczYSWkSX7xwyGOADu:WwT7rC6qDIptQD2Jz2JOyuQ7K

Score

10^/10

stealer eternity

Malware Config

Signatures

Detects Eternity stealer 1 IoCs

resource	yara_rule
sample	eternity_stealer

Eternity family
eternity

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Silviozas-Premium-Proxy-V3.85-CRACKED.exe

Files

Silviozas-Premium-Proxy-V3.85-CRACKED.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.eter0
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.eter1
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ