SecuriteInfo[.]com[.]W32[.]Trojan[.]HRZ[.]gen[.]Eldorado[.]7653[.]1489[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.W32.Trojan.HRZ.gen.Eldorado.7653.1489.dll
Size

234KB
MD5

ca0b8a45b640bcb527ed9af51fb02a40
SHA1

a8ede4069420948a84c02e43eeee7a813e4bf96f
SHA256

ee753ab736ce308017d71ceb9368128b9f59aa8bad38df0aa942b54c678519c9
SHA512

35e9a82ecf39cd4f7b147f6d61d0321bebf6076b532257860c118a735ec8fb89a0ca1a40fa39e58cb09be828d6373b9c7403da864eb00d71ea411229016aa6eb
SSDEEP

3072:q6LcCGoSCPtBp08XF+DIjppwU67w92ltIY1YTbsek/LGWlXVCd:q6YnCPSu+Wpl67vbu8ek/L5lXVC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Trojan.HRZ.gen.Eldorado.7653.1489.dll

Files

SecuriteInfo.com.W32.Trojan.HRZ.gen.Eldorado.7653.1489.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

dDaV8/44
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ