Static task
static1
Behavioral task
behavioral1
Sample
Eaton PO-45150292964.exe
Resource
win7-20241023-en
General
-
Target
b1c62d80debeea31ee00cbe0b96f33c8bbdb9bee1913729e3e6c35ed122012a5.zip
-
Size
182KB
-
MD5
677d28fa7c97d5dedf04560533915671
-
SHA1
ef745c52bcd78bb57901501221c9e20fc45d4b22
-
SHA256
b1c62d80debeea31ee00cbe0b96f33c8bbdb9bee1913729e3e6c35ed122012a5
-
SHA512
ce66437ebe0a0260e1060bdef73bb2e89269320a802b6d5382c8a36c6b4d18492d1c37d63199e48119faccd2bc35e7e4045aedd8cdb0acfa67fbc0eb93259160
-
SSDEEP
3072:uPfTUHgBcUq/0BYdzEoj2jZ6B+KiCiuQUgi6F7aKVNerpNdJcVhJs9ED+N1fZwVC:LHg+lAoGZ6m5repN4VhaWD+NiDQbqdg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Eaton PO-45150292964.com
Files
-
b1c62d80debeea31ee00cbe0b96f33c8bbdb9bee1913729e3e6c35ed122012a5.zip.zip
-
Eaton PO-45150292964.com.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 514KB - Virtual size: 514KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ