SecuriteInfo[.]com[.]Trojan[.]TR[.]Crypt[.]XPACK[.]Gen[.]28348[.]13786[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.28348.13786.exe
Size

920KB
MD5

3d966bd2ce205ef0c186058a96f0213d
SHA1

46839973fe2c5881d423cc6209b00d3735d6c139
SHA256

6b44f1402f7f95a00d6c6bebc1cf9ee2dc8d2dfab0ee78f683064f2c721c2be8
SHA512

de7f735348d65a21678a621da9b63d3761d0194370d15de569c187806ff81707992541616d9dff8fa5693c0e05ffeb5dfbbc9eb4e422aa6ce4b31309f9f7f433
SSDEEP

12288:HO7vS7dJ/7jzzMVlzTkiYUbsCTZ0ITlr1M4lLp2iBuPQKincyqS89:HO7vGJjX2eUbs4d1n1LKincyB89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.28348.13786.exe

Files

SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.28348.13786.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.beibei0
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE