Static task
static1
Behavioral task
behavioral1
Sample
Eleven.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
Eleven.exe
Resource
win11-20240426-en
General
-
Target
Eleven.exe
-
Size
245KB
-
MD5
b2dccfdf2274ea65c0e973efb2f3e4db
-
SHA1
c645449e392351b91d7d927f540951ed0dd286a6
-
SHA256
ff4406f8491cf0ad3a6dfe9f191754f0df99669a436aeacb67563a287d194581
-
SHA512
839ccdf7c88bf43d1baaa4dc91a2317536208e93a49d61b3aa09d46020493207343e284ee8f7bd172c81e1a5ad20d9d02aafc31766bae66cc14a8fb806d713b2
-
SSDEEP
6144:ux/LcTEyF1dH3VOVw44UOisbaxHUsAxyOzk9jAP4Ubc:TBREcUkHxy8yAP4N
Malware Config
Signatures
Files
-
Eleven.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
51:a9:c6:77:f3:35:54:a4:4d:6a:5f:51:00:7b:ec:faCertificate
IssuerCN=NULL\\andjoNot Before13-05-2024 01:05Not After13-05-2025 07:05SubjectCN=NULL\\andjo87:14:b9:91:d7:3a:83:05:f4:87:80:5a:1e:eb:0b:f7:98:f4:25:a8:e2:14:b1:36:71:df:a4:d8:c9:47:2b:31Signer
Actual PE Digest87:14:b9:91:d7:3a:83:05:f4:87:80:5a:1e:eb:0b:f7:98:f4:25:a8:e2:14:b1:36:71:df:a4:d8:c9:47:2b:31Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ