Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.7354.3276.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.7354.3276.exe
Resource
win10v2004-20231020-en
General
-
Target
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.7354.3276.exe
-
Size
472KB
-
MD5
becb810848467fe3b458aaeba18c7e74
-
SHA1
f60f3b38f672db7c5cdf5634763ce5a794e5c96c
-
SHA256
a66c78c0319ff9ddd9cb45f1c73e14aa9bad593e5749f3f42eebbacf7a90101a
-
SHA512
0df30ef11287b2e4236b854768eff26ed05ec3119d7577da96275fc06a9461e99e751e3718e1f9397a9b400638e2fdcce09b1cd0d04c7ac17b1897f992e07027
-
SSDEEP
6144:z6MsVRmtAf2aYhWag2l5nBThyI3Hiv1G:2MsvmmFyTJCv1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.7354.3276.exe
Files
-
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.7354.3276.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 452KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE