SecuriteInfo[.]com[.]Trojan[.]TR[.]Crypt[.]XPACK[.]Gen[.]26755[.]3858[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.26755.3858.exe
Size

436KB
MD5

5ce1ec1c0ed1c14682fc3ab99b780b5a
SHA1

8ced698902f310d03ba63d8b9017d0c5c950c928
SHA256

8eb61f3ab1f7936252ba859f041bb9401ec454fc377d750bde8c926e735211ae
SHA512

b375659099a484082a6918609ef7d1abb3f4ebfb777ff4ca203bd8fd532e7edf371ecf10519c71b0ae3c9ed94afd05bdd2c895b0b8b3ef599cdcb7b9ff2a85a2
SSDEEP

6144:BRk5nlLnF+bu8by7lgRcVxSzk3SBfizj13RBtIIZbK0oS99:BRundF+b7S99

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.26755.3858.exe

Files

SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.26755.3858.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORiEN
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE