SecuriteInfo[.]com[.]W32[.]Xpack[.]E[.]gen[.]Eldorado[.]16014[.]8444 | Triage

Sharing

General

Target

SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.16014.8444
Size

1.5MB
MD5

a330a78c2694aff16dc3e9ea5919a0cb
SHA1

b41b88e484b5beecb3be26a8845b1e8e90d8d3c7
SHA256

438611dd97562dca9d43b8de1f1bf4f91d5c2275da065251c021b23517494c65
SHA512

599c6d96e924ba5a6cadd23dce83668039282b4dd9a92eafd1423753c8912067aa648fcd48cc922d085af367e754f7d04dad96323ec8a97348b8b4c0b146b36d
SSDEEP

24576:x1Wne28JBpiYW4NfJTALJQU1DPzu2IwRHsZj3esG:JntHXNfyLJQU1qqqj3W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.16014.8444

Files

SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.16014.8444
.exe windows:8 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1012KB - Virtual size: 1012KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 484KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ