Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.23129.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.23129.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.23129.30084
-
Size
132KB
-
MD5
76e2589f38bb16676e00bb88e612634c
-
SHA1
aa0ea35dc29d69dec112b0c3bbae4a7aa3a72178
-
SHA256
991423212ca8d7e80497bad3a159720b03de528a052cadd51e5641a0202aaf7f
-
SHA512
9ac8eb8546e488c00d14663e7ba446a4771a1b78435fcc49935880cd0c711a66500cbc9f603d75187de18cacb6c4b37d230503378189b6bdf2bf6955fcbe9146
-
SSDEEP
1536:9W3G0GBDBLZHwXCbJk2gYShphwkNl+V1X0aCO9PXFIm8lZOwjt4TkdWK9:6Gz0wJsYShD3l+VWCPV58lZOKeg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.23129.30084
Files
-
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.23129.30084.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ