SecuriteInfo[.]com[.]Trojan[.]TR[.]Crypt[.]XPACK[.]Gen[.]16784[.]9175[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.16784.9175.exe
Size

48KB
MD5

8936b41b898671a62bc1f80fecd748db
SHA1

436a31ed9fb3071d46c1d6d8dd46302255278034
SHA256

682fc859c6a24ee284bddddc1d2e3d1af32051dfc5d327ded68a45d899c9ede4
SHA512

11c6d357544e9ee8ed094b81302abc148d6f07751f96fc5cd4010fd16dcaf72004bb0ef614208bfb65d2afafa81d86235c311179a02163e9bceb78b0d385a8ee
SSDEEP

192:CWtvSpWqf3z+dhG5Pr3lIRiCiT8/PejP00E8TqP3w878EcLQ8Du6hFnNMd4MX7xg:EWqv2Sj3KQXTDjt0wZt3XTnNMd487C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.16784.9175.exe

Files

SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.16784.9175.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ