Eleven[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Eleven.exe
Size

247KB
MD5

2b6a8ee141d5e7b610dbff7b9506a0a3
SHA1

6f1ebae3cd7b3737e45d8f6172275067eb8cac78
SHA256

c7bfcef8e862462d0619e5cf88b90cda4718989bc3c20fa1d22c257995b98c51
SHA512

15999b2b299a64dfcfa011db04735a245eacd830afaab4b0166830942e548feb6121f448f1b123d9ed9973bbc79d29857a2c23ffd531518377e39bf1b0d323e2
SSDEEP

6144:VkvTx/LcTEyF1dH3VOVw44UOisbaxHUsAxyOzk9jA/mb:Vk6BREcUkHxy8yA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Eleven.exe

Files

Eleven.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ