Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.11597.2740.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.11597.2740.exe
Resource
win10v2004-20230915-en
General
-
Target
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.11597.2740.exe
-
Size
44KB
-
MD5
a3b39af91b35fbb66acd6ad182430066
-
SHA1
de2b1fd13a7d36b5828f73a835e5f607a891d2ab
-
SHA256
8fa568c44b07124e6c6ff35f84ae5166b2652524e10c12b5f5fd43d6f8856e1f
-
SHA512
954733456ca6397d6c92836fa10a17aa0ba533164323964f4e7d2d0fa592ee4c4a98b1c61dfd35476b4aedf82727233b598bc7399ea2274e00f71c583ed29171
-
SSDEEP
768:H0C9e3ngbdb1yaE6M/FP0EavtcRV2lDNQ1Lj/b:H0RngJb1KFzYjlZQ13/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.11597.2740.exe
Files
-
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.11597.2740.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ