General
-
Target
Client.exe
-
Size
63KB
-
MD5
296810e1fbff9665897bd56f8c2a552f
-
SHA1
346b0861175583fafb08d4f66f729795530215f6
-
SHA256
e5dfcde448d8aa492fa285d3d4f5fa24dfd52ef39f29d0c7f50851e059a44c7b
-
SHA512
becd32f82a030980b86a80c316acabe0e667e1a6f049ae9298667f9f715b2dd8400efd6fd0bcac56e83a745b9b4ce31041a5a3f75b1691c9c0d6ad579750d296
-
SSDEEP
1536:Ah3HaMmkefuYjsDAiENQVseNbIB294Lc1TAd:E3GNjsD8YNOHLGAd
Malware Config
Extracted
eaglerat
127.0.0.1:7788
83.252.66.33:9875
Signatures
-
Eaglerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client.exe
Files
-
Client.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ