SecuriteInfo[.]com[.]W32[.]Xpack[.]E[.]gen[.]Eldorado[.]5197[.]27439[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.5197.27439.exe
Size

652KB
MD5

9d060b1e7522e2d25ac016911314e92f
SHA1

7bd8dcf288e7067ebdfe29cb9c509a4c40180c89
SHA256

baa6be9662091a00f4c1fa4d74423b6221a175168ef4430d5b5757deee959cf3
SHA512

928370a3e3ede2682d922a13dd5cc5a69e2ba2d616257164ba6eee43ecc715915e8e1b2fa18b748bc32c74ee175b5cb5e06e8c27d715f0114ac863645cf40841
SSDEEP

12288:R/8LQW4/DIQpY5UI3Njz3ozwJWKmWX/kMJITD2vM:RE13EKLv0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.5197.27439.exe

Files

SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.5197.27439.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 472KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ