ethereal_loader[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ethereal_loader.exe
Size 1.6MB
Sample260922-2cf96agg48
SHA256 5768a858e4756aa6bdb09e79abf6c3e948cfba431120cb636c91e4abfa25604a
MD5 13425a51a42f132ff5f77c7c6b8c0288
SHA1 00a2d6bdf994c216c41db73620d5b786d35d7dfa
SHA512 7dbe3e512486bf0346882aa1c0c56c9198f09458998becf805840e2b4e295c1f9551945c22620ae17ecb973e84d0a8115e468707ee0b3467fcbadad4b59ea33e
SSDEEP 24576:4Fib2HwmOb4MJzCVCvJJOeG1LYc7K5l0NQCI86piSFnQsV:4FC/JzC0vrOerb5qQC5j4n
TLSH
T1EC757DC2A264859BEF658A786457201FF952390A17608BCBF7970CC0CF66FD13738B66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ethereal_loader.exe

File Explorer

ethereal_loader.exe

.exe 1.6MB

ethereal_loader.exe

IMPHASH 07908ddfcb8805bbc650ac9f0e2613ab
SHA256 5768a858e4756aa6bdb09e79abf6c3e948cfba431120cb636c91e4abfa25604a
MD5 13425a51a42f132ff5f77c7c6b8c0288
SHA1 00a2d6bdf994c216c41db73620d5b786d35d7dfa
SHA512 7dbe3e512486bf0346882aa1c0c56c9198f09458998becf805840e2b4e295c1f9551945c22620ae17ecb973e84d0a8115e468707ee0b3467fcbadad4b59ea33e
SSDEEP 24576:4Fib2HwmOb4MJzCVCvJJOeG1LYc7K5l0NQCI86piSFnQsV:4FC/JzC0vrOerb5qQC5j4n
TLSH
T1EC757DC2A264859BEF658A786457201FF952390A17608BCBF7970CC0CF66FD13738B66
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10608

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetStdHandle Beep CloseHandle GetLastError WaitForSingleObject Sleep CreateRemoteThread GetExitCodeThread OpenProcess VirtualAllocEx VirtualProtectEx ReadProcessMemory WriteProcessMemory VirtualFreeEx GetModuleHandleA GetProcAddress LoadResource LockResource SizeofResource LoadLibraryA FindResourceA SetConsoleTextAttribute SetConsoleTitleA CreateToolhelp32Snapshot Process32FirstW Process32NextW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetModuleHandleW

user32

GetAsyncKeyState

vcruntime140

__current_exception_context __std_exception_copy memset memcpy __current_exception _CxxThrowException __C_specific_handler __std_exception_destroy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf __p__commode _set_fmode getchar

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh malloc free

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _exit _initterm_e _initterm _get_initial_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit terminate _initialize_narrow_environment _configure_narrow_argv _set_app_type _seh_filter_exe exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale