Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.31352.29004.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.31352.29004.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.31352.29004.exe
-
Size
108KB
-
MD5
aa258ab9a5af439e9547c29ea03b3bb6
-
SHA1
1b0fba9aa44e0b7ac0f7ceec8f25a3de50bd7e9a
-
SHA256
1cb6b3bb34473e436d31c35c23ab793d957ff39a974cd3509ff4600dff26ce5b
-
SHA512
f76ce89d78e423242744ed2aec5b9e4f9ff2dccbc62ce4620b3ef6424123f888e80e00ca4d11bd19e15382420e619d33b4411f3e20f8c962727286ee775d19ad
-
SSDEEP
768:fA+zwinfL9H41l/6lX6Iy8n02MPSv4Not34idnj04DVT/RgIBsjq:fjpfhw4yrKv4uP04DHgU2q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.31352.29004.exe
Files
-
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.31352.29004.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE