Behavioral task
behavioral1
Sample
EMV Reader-Writer v8.6/EMV Reader-Writer v8.6.exe
Resource
win11-20250314-en
General
-
Target
EMV Reader-Writer v8.6.zip
-
Size
155KB
-
MD5
3f613e708e5e0e6bb5e61b10533b17df
-
SHA1
d1f5ecb16ba4ca82a97ad32f3aba251d7ea83121
-
SHA256
cdd46788dda32024fce9ed691940f55c474b864014aa3951d2b4e4d730d29ae8
-
SHA512
67cbabb8fbcf79f635d6f2c653e93819318e55d7a7811f28aca3c6c48f5257601c9dfe6fa023b4cf168875db19da2d5043e29241916966028d9dd37f64d0452d
-
SSDEEP
3072:/UoZhW45W269sVEaf4JPrt4z0NdAWXUxgKgnuPaGusvYE5NsiWf:L7nCWEaQJPB4z0NdzUxsnkapbio
Malware Config
Extracted
eternity
http://izrukvro5khcol3z7cvvdq3akeunlod2gshgn7ppo3a4jvse3z5hpiyd.onion
Signatures
-
Eternity family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/EMV Reader-Writer v8.6/EMV Reader-Writer v8.6.exe
Files
-
EMV Reader-Writer v8.6.zip.zip
-
EMV Reader-Writer v8.6/EMV Reader-Writer v8.6.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 335KB - Virtual size: 334KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ