Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.4763.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.4763.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.4763.16159
-
Size
132KB
-
MD5
9072933486b2129372c9544c240b595d
-
SHA1
f2c52fa89f554fc3b5267949e897fce1b8e86d67
-
SHA256
987132faa64afc4c240e06954981429f8e589134537665e956e80d30e3ec1072
-
SHA512
c70b0d53603304aff260c4a4cd40af899373a96f1fe7b8014fe7579b7dfc56d19223a0cc1331dba081fa359a911a3b1d03efe5727eda4de0fc389d6ebfc9bc4f
-
SSDEEP
1536:Zz4eUt+oUVVeZgYShphwkNl+V1X0aCO9PXFIm8lZOwjt4TkdWK:F4zUV4eYShD3l+VWCPV58lZOKeg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.4763.16159
Files
-
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.4763.16159.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ