EverlastingResearch[.]exe

Resubmissions

24/10/2026, 02:47

261024-dacl7aft4s8

24/10/2026, 02:38

261024-c41qfawx4r5

24/10/2026, 02:31

261024-cz62nahs8r5

Sharing

Copy URL Twitter E-mail

General

Target
EverlastingResearch.exe
Size 10.1MB
Sample261024-dacl7aft4s
SHA256 60a2fa3a80d822ebc2e6d45c9d2ff7ea025ea78f324bacc359507bd826b4dd83
MD5 cee4bb91746cd0d36aa7140aeb9ac168
SHA1 b917d29a0f1481e8034e810749c06802330883a1
SHA512 2df66802bf376d98ff85128f5ed29ca457182fefa8cf0b1c54f794d77519597d16b9dc705d9ff4c7755516feb94b66f532f8182365960776c2999a7ab02eebbf
SSDEEP 196608:UUN5W2ZeassB7EPjvpseEL2ijdZYwFH9U3at1uwbcvKH4xUEQf/gTu+v6ly:P428as4kmeNihG2HO3SuwICgUEQf7+S0
TLSH
T198B633D4F42A42E9FB69A1389BEED537FB7961338B1B1136A42975E18A00CD4F035BC1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EverlastingResearch.exe

File Explorer

EverlastingResearch.exe

.exe 10.1MB

EverlastingResearch.exe

IMPHASH 60d6cac48ec869346bd1ffeb13bebab3
SHA256 60a2fa3a80d822ebc2e6d45c9d2ff7ea025ea78f324bacc359507bd826b4dd83
MD5 cee4bb91746cd0d36aa7140aeb9ac168
SHA1 b917d29a0f1481e8034e810749c06802330883a1
SHA512 2df66802bf376d98ff85128f5ed29ca457182fefa8cf0b1c54f794d77519597d16b9dc705d9ff4c7755516feb94b66f532f8182365960776c2999a7ab02eebbf
SSDEEP 196608:UUN5W2ZeassB7EPjvpseEL2ijdZYwFH9U3at1uwbcvKH4xUEQf/gTu+v6ly:P428as4kmeNihG2HO3SuwICgUEQf7+S0
TLSH
T198B633D4F42A42E9FB69A1389BEED537FB7961338B1B1136A42975E18A00CD4F035BC1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CloseHandle CreateEventA CreateMutexA CreateThread DeleteCriticalSection DuplicateHandle EnterCriticalSection FlushInstructionCache GetCurrentProcess GetCurrentProcessId GetCurrentThread GetLastError GetModuleFileNameA GetModuleHandleA GetSystemInfo GetTickCount GetTickCount64 InitializeCriticalSection LeaveCriticalSection OpenMutexA QueryPerformanceCounter QueryPerformanceFrequency SetErrorMode SetEvent SetFilePointerEx SetUnhandledExceptionFilter Sleep TlsGetValue VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

__C_specific_handler memcmp memcpy memmove strchr strrchr strstr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p___wargv _cexit _configure_narrow_argv _configure_wide_argv _crt_at_quick_exit _crt_atexit _exit _initialize_narrow_environment _initialize_wide_environment _initterm _set_app_type _set_invalid_parameter_handler abort exit signal system

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf __stdio_common_vsprintf fclose fflush fgetc fopen fputc fwrite getchar putchar setvbuf

api-ms-win-crt-string-l1-1-0

memset strcmp strlen strncmp strncpy

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _tzset

Name

.text

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.exom

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

10.0MB

Virtual Size

10.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

399KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

572B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

EverlastingResearch.exe

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

generic