Behavioral task
behavioral1
Sample
Client.exe
Resource
win7-20240708-en
General
-
Target
Client.exe
-
Size
63KB
-
MD5
2f12b8b7620e20ee0bc6c18e626ab994
-
SHA1
11d6814a661909cdeb1adb3f48b819938275b011
-
SHA256
dcd369be95eee4233d6e11604466832f0dde9dc51f19ee99bb211c6fc6cf301b
-
SHA512
ade3b27159298522a2e4f25a03d2b7b3c2225bf69061788d2671ee1f8243247c7685e616c634df9093c9a48e1cbd613aea7ee90066b3e2b99bf8ebaba9f3b6a3
-
SSDEEP
1536:Mh3HaMmkefuYjsDAiENQVseNbIB2bXsFK:Q3GNjsD8YNOcXso
Malware Config
Signatures
-
Eaglerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client.exe
Files
-
Client.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ