Static task
static1
Behavioral task
behavioral1
Sample
Eleven.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
Eleven.exe
Resource
win11-20240426-en
General
-
Target
Eleven.exe
-
Size
249KB
-
MD5
58a9d70a7903182acfe0ba257d8a7c07
-
SHA1
4db25fee7169c4fa0a68541669004d7158de1e44
-
SHA256
030ab171a52d29d77d2b574b7fb54222b3f91a633d6a86e7921342c0176c8c69
-
SHA512
f8e9635e635dc5f5e94f3ba0b10b63d003ceb4c794e0d14a3aaf71d7d27695d8d6ad4737dc4989fc5e8b55a42136ce55b3edb39eea366ba96012c0d779dfea29
-
SSDEEP
6144:Yx/LcTEyF1dH3VOVw44UOisbaxHUsAxyOzk9jAP+w6bg:tBREcUkHxy8yAP3
Malware Config
Signatures
Files
-
Eleven.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
51:a9:c6:77:f3:35:54:a4:4d:6a:5f:51:00:7b:ec:faCertificate
IssuerCN=NULL\\andjoNot Before13/05/2024, 01:05Not After13/05/2025, 07:05SubjectCN=NULL\\andjo7b:62:98:e0:b2:52:88:a5:12:67:c6:f3:ce:b8:02:bd:a5:32:e9:b8:4e:fd:96:04:d9:6a:f5:04:79:6e:65:d6Signer
Actual PE Digest7b:62:98:e0:b2:52:88:a5:12:67:c6:f3:ce:b8:02:bd:a5:32:e9:b8:4e:fd:96:04:d9:6a:f5:04:79:6e:65:d6Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ