General
-
Target
Client.exe
-
Size
63KB
-
MD5
e78529ea1778380ffe1e596f73e89e9f
-
SHA1
51d46d763eefe6588e220904b9be0b3865c138a4
-
SHA256
5303cc708b39f390151ec96fa2164107f46b15be1b4e62ddb0e79b659a0ff57e
-
SHA512
6c144e569216773d1048cb66e86e603583bf551656b386d068c6d68132b5f0d6297fc5b1607a4b5c920b59833aae52ff8398f710f1bc160ca9679a9884cdac7c
-
SSDEEP
1536:ph3HaMmkefuYjsDAiENQVseNbIB2w1rCBdn:n3GNjsD8YNOd1rWdn
Malware Config
Extracted
eaglerat
127.0.0.1:9875
127.0.0.1:7788
Signatures
-
Eaglerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client.exe
Files
-
Client.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ