Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.S-909ca299.Eldorado.10314.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.S-909ca299.Eldorado.10314.exe
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.W32.S-909ca299.Eldorado.10314.23228
-
Size
1.4MB
-
MD5
cb4d29763885bb35396764ea146ef932
-
SHA1
3e0692b81a418f6ffacf5612ce3c84d3d5b7f9ad
-
SHA256
fa1cb2d2f92ad9e1ef943b92268f510eb8d6d83f4cc8676e39a91a4b4cf6a0c9
-
SHA512
4a68998682d97ef954447b857fb90862206a40fabf706b6c8d027a0272f77ca96907545ac8bf25ee52e3aa6b2b723398c4a8fc562af6536b53b2cad6c19e328f
-
SSDEEP
12288:x6sbbfaIZljYe0GxGUapcpiUPm67yag1ucmGvw+:x9vzljYgGp0xv7UUG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.S-909ca299.Eldorado.10314.23228
Files
-
SecuriteInfo.com.W32.S-909ca299.Eldorado.10314.23228.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE