Eleven[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Eleven.exe
Size

32KB
MD5

70d0c8d7dc4db88b1397c2d8b3a631eb
SHA1

fd96d0e7ac6b48f7df83671c8f4ee23fd441920c
SHA256

402b8c78bd16dd3bb8584a9867adc65e0524ce4b850ca62ca22b6e6f37aa3a54
SHA512

81e8dbccfd763dc17e458f41839a7061919f28727fa24377cb9ec9f7bb8cfae1d45f3cfbb8a49b506626ce05768b120933a39291f848fce7d545c20406a9ff88
SSDEEP

384:fWC14vKQBK5v1Zy8ILvnk+9A+12JCMYaa9l2IZn/KPnKU5NrmbKpM1HsqMjyKiS6:fevSFn+u7e1dKV76b3u484n+K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Eleven.exe

Files

Eleven.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ