Behavioral task
behavioral1
Sample
b288aed5cf484352d979f23a7e2f8e2fd75bb578a7e81974c7b820d779875e29.exe
Resource
win7-20240221-en
General
-
Target
b288aed5cf484352d979f23a7e2f8e2fd75bb578a7e81974c7b820d779875e29
-
Size
64KB
-
MD5
e54ac814c454e05ed56416b9411b5486
-
SHA1
cf2636f5b7287cf69d9b15fe356dab59de19d7b4
-
SHA256
b288aed5cf484352d979f23a7e2f8e2fd75bb578a7e81974c7b820d779875e29
-
SHA512
1966fedab4dc85b4a0c84cb111177cb22280f9857eabc11a5cd70ec65e1df4bf47b6c8fde0faacb686ba35fc7b81e5a25ab4953feb98738c6216c658c3a11d5b
-
SSDEEP
768:b9XxYwPAyajomk3IRG2/QVKawHqK5/ypWHRYI277hr3cnDv1o1q/g7BLUJQ2CWVI:bh3HaMmkev/uh3cnD9o4/guJBVCh
Malware Config
Extracted
eaglerat
127.0.0.1:9875
127.0.0.1:7788
37.120.233.226 :3451
Signatures
-
Eaglerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b288aed5cf484352d979f23a7e2f8e2fd75bb578a7e81974c7b820d779875e29
Files
-
b288aed5cf484352d979f23a7e2f8e2fd75bb578a7e81974c7b820d779875e29.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ