Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.S-909ca299.Eldorado.20338.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.S-909ca299.Eldorado.20338.exe
Resource
win10v2004-20230915-en
General
-
Target
SecuriteInfo.com.W32.S-909ca299.Eldorado.20338.23901
-
Size
1.5MB
-
MD5
31de69de48835986791b64feb175c286
-
SHA1
fd1200a4619777e3b5e9c861c017b7fdb451bb99
-
SHA256
be8865acb8899d3132c05473eb243e9439eed6ef8a7ec619f7f37a413e2b0d08
-
SHA512
ab9b807c0ba44d346691f5d19d33dd317f9b1196f59e3a76b8eac48c4a9db8e6ee078b5f7808b40c106438c607d9fe9ac3b9d0d17518d643ec789b60b1736bd4
-
SSDEEP
12288:pcyfvf/CID0OVr6Li9f5aw8nF/TkfqCppb97HzbFR89GPOmbvw+:pcMf7/r6i54nFbQ197H3pzb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.S-909ca299.Eldorado.20338.23901
Files
-
SecuriteInfo.com.W32.S-909ca299.Eldorado.20338.23901.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE