Static task
static1
Behavioral task
behavioral1
Sample
EaglesBCTools.exe
Resource
win11-20240802-en
General
-
Target
EaglesBCTools.exe
-
Size
113.5MB
-
MD5
233182fb9c38a48dde77169d5b95cf6d
-
SHA1
5a424a402719b2924bd899a3fd3a7de69190217b
-
SHA256
da41380373a0f93dc1a2be06a386bf037165edfdcd5e5e8ce59da6de5ca37b41
-
SHA512
ce2f079dca936b32bf7c7b1f7a216207fb4bd3e40a8858b0d032a6391495419d995b0c0e9eddc32fc05aa62bf8d90d2b345205d5f96899dfb9fc5449192bf812
-
SSDEEP
3145728:G0ej6aE/LeesEeiW1XzemyERgBmTwJftV6PBcB:Gtj7uC83AXzpyctTMfn3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EaglesBCTools.exe
Files
-
EaglesBCTools.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 113.4MB - Virtual size: 113.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ