Static task
static1
Behavioral task
behavioral1
Sample
Eleven.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
Eleven.exe
Resource
win11-20240508-en
General
-
Target
Eleven.exe
-
Size
246KB
-
MD5
c3050a0c5265ec60b0cfba5283aaedad
-
SHA1
fe0b37ad1b70bf454d760e370fbdcf108e18b59a
-
SHA256
8640f526d35e7af50d43e9b15a90b35b0f45d213bc680842108e982d337dc0b4
-
SHA512
e008e49020ce505c3f75eb051d64eccfd3ca2b81b851ddbfdd2df44d234fdec6034590c73ef466406824a03e394be60c772b3ea3ce6f297c09f573868a02fc80
-
SSDEEP
6144:j+x/LcTEyF1dH3VOVw44UOisbaxHUsAxyOzk9jAOb:/BREcUkHxy8yA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Eleven.exe
Files
-
Eleven.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ