Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.19930.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.19930.exe
Resource
win10v2004-20230915-en
General
-
Target
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.19930.5479
-
Size
328KB
-
MD5
1e02fa4d44ea9841009731911bfa0292
-
SHA1
9562e89abd75d72739fe2bdc89b814d1e3a69f03
-
SHA256
2c2bd6f198033a90b270b4434a2fddd3b7a3a8b29416a75872e39a2181b16b48
-
SHA512
800da70adb060550b80364624de1e9387e1ead4d4378b88f544e7988a9caafefac0f8e8f74b6f95d5c1468201347367706c8a1c00d69dec48ae54a791bdde3dc
-
SSDEEP
3072:jWd3oEjxY+/+B7zWJ7nEwnBaEokcLWvKy66xNe3FieHfs7kOzR5:jq3DxGBn8KEoZWb62Ne3FrHmDzv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.19930.5479
Files
-
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.19930.5479.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ