SecuriteInfo[.]com[.]W32[.]Xpack[.]E[.]gen[.]Eldorado[.]25514[.]2474 | Triage

Sharing

General

Target

SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.25514.2474
Size

200KB
MD5

2f72be01870ac0b3bc5f5b570e6359a8
SHA1

df98437c18c317daa016e6d833ce9a3aafa0e0f9
SHA256

7c497795a7d3b6d41197040270eb440e2528487c91fd1f4d633fa0f1c69dbe90
SHA512

60b68511bd4c8b3b0bd1628180e6701274110baff0040dd51c95f6caeb7d80a9851052756ac68de9a7f1533f5d9b12abf2de17423ae9794a5b057ff87989c72b
SSDEEP

3072:nnn3Ym/vxma/oIQP09VSI5zp5XRERghCcQTBfXB9Oxa:3Ymca/or0uI5zpVRN1QTBfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.25514.2474

Files

SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.25514.2474
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.codedat
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.flat
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE