Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.17376.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.17376.exe
Resource
win10v2004-20230915-en
General
-
Target
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.17376.21086
-
Size
348KB
-
MD5
609d9a16ca980f9b8dbdc8db7405aee3
-
SHA1
5fa19a755bce362683d0ac8f4d935758c3914c6b
-
SHA256
90923c8c53c18d841c5c4b1eed04e91bb73383b62633c983efe67a2e58943185
-
SHA512
6ba642733673ed09dc8b4673e6eb52c9ff7ab232d268936892835dc5f9bb5bc7f272c8e25025803193d87af2e10de6ebed9272bcf241336d22769e04478375cd
-
SSDEEP
6144:Rw7ZH7V7e+IGsI3QjuRN1Cc1BunN1NXJnku:RwL7Y/huRN1xBunN1NXJku
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.17376.21086
Files
-
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.17376.21086.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ