SecuriteInfo[.]com[.]W32[.]Xpack[.]E[.]gen[.]Eldorado[.]6442[.]17070 | Triage

Sharing

General

Target

SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.6442.17070
Size

1.3MB
MD5

7338b79f61005228fea8d2283499824b
SHA1

ac96b82f393c20b616d48e543e4eecae6e945e43
SHA256

4df77205dd62f484937e98b74cfa14d79b60708f33d80051ff064adcc8bc3b1d
SHA512

a645043aab7757294f1d61417044b0adb00098786d1f9a985928ab0f3629d0bd2a85cad7cb1a197fcb3a60169808e2ccaeb901f2708847d4701f23f4e45f3188
SSDEEP

24576:jVTj3eiMW/AO4zqNWnRteDmeUwYhC4oCWDfwxfeIOT0:f4YyyDmeUjC+QIOT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.6442.17070

Files

SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.6442.17070
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 968KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ