Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.822.24358.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.822.24358.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.822.24358.exe
-
Size
124KB
-
MD5
54892e43202750186c97cd821b8f64c2
-
SHA1
1301fc5891c54bf68c8c25471a301c11735a6eb7
-
SHA256
163f91ad022b73ccf0c9fdf9f98ce59fb73346b15d99d2f0596bb9d0f51ff208
-
SHA512
58d61b09f50c421e7b4f89d13be15e6b483ec3fa87daa295096633425bbae8b8cc6f015bbc366a6fa0a93c427c1e1e63e06701f17adc8282296ff3504103265a
-
SSDEEP
768:EFxzpniFB2uWOOoeHmUalZ1G9P/z/8ovFSj1HLs:g1pm2VOtUaH09jkWo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.822.24358.exe
Files
-
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen2.822.24358.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE