eternity | a6cf69a659d1b97d3c62bff4d9ec1f80bab184bb1b10b73ea809a6ac15e3ecac | Triage

Sharing

General

Target

a6cf69a659d1b97d3c62bff4d9ec1f80bab184bb1b10b73ea809a6ac15e3ecac
Size

163KB
MD5

cd1ebf7a922a469cc0cce3f324a28eb2
SHA1

d93e03e735cd7d6f0ad844355d11c257c6c934c4
SHA256

a6cf69a659d1b97d3c62bff4d9ec1f80bab184bb1b10b73ea809a6ac15e3ecac
SHA512

93ed76d5eb52ea629d7a074a9be475b079e4d99acec0a20d7431553fdc6d68e8346e00884227263628d5a8633faaa510245569e77c712c824634cb2483bf67e8
SSDEEP

3072:IbdKaxG4iig2zg3r98WdZDEL/Pfjncj3S22vrSXf:2x6iOB8WdZg7zcj3uS

Score

10^/10

eternity

Malware Config

Signatures

Eternity family
eternity

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
a6cf69a659d1b97d3c62bff4d9ec1f80bab184bb1b10b73ea809a6ac15e3ecac

Files

a6cf69a659d1b97d3c62bff4d9ec1f80bab184bb1b10b73ea809a6ac15e3ecac
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ