SecuriteInfo[.]com[.]Trojan[.]TR[.]Crypt[.]XPACK[.]Gen[.]1034[.]6168[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.1034.6168.exe
Size

2.4MB
MD5

bbb86f44bdabd4b807666140381ac313
SHA1

76118ad482d718e58bdfbf9fd1db03d4a12c6a55
SHA256

08e6cb8c0bda2ee56050482d5e190c66269374a691dfd623a497dbf1171d93d1
SHA512

d7688fc0b4be22d270adcc44c10d27b8e642a4b49181beee8e706a305af0c4cc44d64145659ed2e1cc4915bfe9d4dbae4819f050a18af4d9e3d77bf5b574b70d
SSDEEP

49152:VrX6igMvfF3JluSbfYhcZmx4V5B5Owsqb:VroMxDYosqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.1034.6168.exe

Files

SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.1034.6168.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ