Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.27194.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.27194.dll
Resource
win10v2004-20230915-en
General
-
Target
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.27194.24088
-
Size
1.5MB
-
MD5
1e3a512fbceb893ad157943c174be317
-
SHA1
ef127fb5161864ab70afe76d6d223109372fba1e
-
SHA256
af5c2c36eb78a80459d9793d8adb92346d0041d97209b375f2bb22fc0ae73baf
-
SHA512
508bbcde155f4f7be560b051ff93dad8108f2cbfb12b140ffb93bff963249e8e787ac85c83ed25c9d23a0e1fc31edef393711b690dca1c55f16b9e1d9f08edb6
-
SSDEEP
24576:gtnEOU6hp4PwRPEY9PMQg2E9IPDSODTf26tR5mgfvj5HfgkE/W7IX15imfMdz:gjPEY9PMQg2E9IPDSODTf26tR5mgfvj2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.27194.24088
Files
-
SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.27194.24088.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ