Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.27274.789.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.27274.789.exe
Resource
win10v2004-20231222-en
General
-
Target
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.27274.789.exe
-
Size
124KB
-
MD5
9aae1df0a3874e406242b7f59879415a
-
SHA1
f041eceab6f667834f532440d45c630a9224c424
-
SHA256
9faa818524e2118e240080b8f3070c33dd04c75aa0cd8f49187a8cfd85f3e605
-
SHA512
82f18193af9c4a71012197402605604c78f810fa064c3e1b2cb39513125bebb17d8492d65802eaf64f4c2778456c54ecb444ca09ad3d01b20036022ef8496831
-
SSDEEP
1536:HuBqbj7sWtu2q28VrzM/0jHYCmjIIT6/qBruUChdH4/QIQLe:HuBqbDtYJM8jHYLB4Lx2/rk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.27274.789.exe
Files
-
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.27274.789.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ