SecuriteInfo[.]com[.]Trojan[.]TR[.]Crypt[.]XPACK[.]Gen[.]13628[.]26077 | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.13628.26077
Size

56KB
MD5

427d0b56575a5832f77fde5686b4319a
SHA1

ad8823800e3d00bb56bd004245ac7e4a74bcd186
SHA256

1e22d8aa9ef11a057d19adcdf232485c9d063050860aef7866d92a5d82e72da5
SHA512

4ae0ef64f7912f3217c96c7dbae01b1b2e390c7a32cbfc59de59fa838c7d3ee72d8eefc75d8f01833d04408e3e0e83f6af9633a396dc01de49be5b15664c09d9
SSDEEP

384:U11hLwl82gBTHBFFbCntgmDyK5+rgAWyL+936Z77H01Hne9hVlubo:URThFFbLmDTU/43a7TCHGhVl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.13628.26077

Files

SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.13628.26077
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.NUMEGAB
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ