Behavioral task
behavioral1
Sample
fe8d3bf102211b2ff7760679699315cd3d099ef756cdd313fea72967066655bd.exe
Resource
win7-20240903-en
General
-
Target
fe8d3bf102211b2ff7760679699315cd3d099ef756cdd313fea72967066655bd
-
Size
62KB
-
MD5
3f6247cdc65adc6cfc64de85dcd73eda
-
SHA1
9629ef54fae85c2ba353571b38f7a9c9b74a6021
-
SHA256
fe8d3bf102211b2ff7760679699315cd3d099ef756cdd313fea72967066655bd
-
SHA512
78a7385bd58217618b6edcfd6a87f3a58051edbef2f401867580f3d11a9e51c220e319dc00ad3a24df70ca1379e698394a7d6e4cc5292b6d180894e8df14be63
-
SSDEEP
1536:oh3HaMmkefuYjsDAiENQVseNbIB2pjQ629G:83GNjsD8YNOqU6yG
Malware Config
Signatures
-
Eaglerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe8d3bf102211b2ff7760679699315cd3d099ef756cdd313fea72967066655bd
Files
-
fe8d3bf102211b2ff7760679699315cd3d099ef756cdd313fea72967066655bd.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ