SecuriteInfo[.]com[.]W32[.]MSIL_Agent[.]GCC[.]gen[.]Eldorado[.]24365[.]9229[.]exe | Triage

Sharing

General

Target

SecuriteInfo.com.W32.MSIL_Agent.GCC.gen.Eldorado.24365.9229.exe
Size

1.1MB
MD5

ed9803cf4fa4d4251627ce1ed3128bfa
SHA1

4904106d13d6c892abbcb06594c6a774ba9ea6fa
SHA256

dd95a518a502780ec49b27354a120d36ed0e804cf4afb26b6887ffd49ba9317f
SHA512

6f0b791fef0e43579fdc2e9dbe3a39a3345cf5dfbefdb3d06e42b04fbf7a3bdb816437ec44124053a5049228b4a3f1c788a23be5eccf6952daaedd9e270113db
SSDEEP

24576:pITMvRFhRRbNWoCfkYSEH3OqtwIuXKkqjVnlqud+/2P+A:pITYbNbNWo4kSH3OqtwIjkqXfd+/9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.MSIL_Agent.GCC.gen.Eldorado.24365.9229.exe

Files

SecuriteInfo.com.W32.MSIL_Agent.GCC.gen.Eldorado.24365.9229.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\hieuc\source\repos\PulsiveGen\PulsiveGen\obj\Debug\PulsiveGen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ