Static task
static1
Behavioral task
behavioral1
Sample
Eleven.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
Eleven.exe
Resource
win11-20240508-en
General
-
Target
Eleven.exe
-
Size
249KB
-
MD5
e1dba47e0dfb67b4390ba4058dbc9373
-
SHA1
a2b6b699f4abd70bb51e4c5ce8163e00d4b9fbae
-
SHA256
32e9dcb3da8c15a3e568de56049fda3c40969fa0ea8e27873da0c56c873f9eb9
-
SHA512
41870cf0c6274b4716e96a5e19c325a856aa9b459b8725251777d6d8b3faf09bdedf52b84ca9937a6d24509a115f74883bd4918ef55376e7bfa597d6aa6d9776
-
SSDEEP
6144:sx/LcTEyF1dH3VOVw44UOisbaxHUsAxyOzk9jAP++1Vxb+:5BREcUkHxy8yAP11V0
Malware Config
Signatures
Files
-
Eleven.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
51:a9:c6:77:f3:35:54:a4:4d:6a:5f:51:00:7b:ec:faCertificate
IssuerCN=NULL\\andjoNot Before13/05/2024, 01:05Not After13/05/2025, 07:05SubjectCN=NULL\\andjo27:26:dd:0b:52:16:24:72:df:d3:cb:a0:04:c2:92:9e:2d:65:e0:8c:0f:a9:08:b5:8b:5c:9b:70:2e:d2:a1:bcSigner
Actual PE Digest27:26:dd:0b:52:16:24:72:df:d3:cb:a0:04:c2:92:9e:2d:65:e0:8c:0f:a9:08:b5:8b:5c:9b:70:2e:d2:a1:bcDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ