SecuriteInfo[.]com[.]W32[.]Kazy[.]CA[.]gen[.]Eldorado[.]29955[.]24476 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.W32.Kazy.CA.gen.Eldorado.29955.24476
Size

2.5MB
MD5

baa404f7605a32101a9e0373d58f04b7
SHA1

41e3e26e4a0ae649a9007a97185c0c63569d0d04
SHA256

544267d05148721be7bfa339fe612c31bc459b8ebaa4ff9ac5667ecd6f4f23b9
SHA512

5dd3b6f97283b6d14af3893f5ec63d8ca4f9f088332500627ed9a21077dba4a7fd83692f0195d769c67a75d8e968a3cb9c88265e7eb50163c7f1d59260b6082a
SSDEEP

24576:XQ6aZOaP+wNosR/GiZF6wakeNVp5Z/fTmT+tJlevZZsOUR+QbgzfuJPn5J35V9IH:LaZOaPekettVpx0AYQwh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Kazy.CA.gen.Eldorado.29955.24476

Files

SecuriteInfo.com.W32.Kazy.CA.gen.Eldorado.29955.24476
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE