Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.S-aaaf75bd.Eldorado.5714.20408.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.S-aaaf75bd.Eldorado.5714.20408.exe
Resource
win10v2004-20231215-en
General
-
Target
SecuriteInfo.com.W32.S-aaaf75bd.Eldorado.5714.20408.exe
-
Size
241KB
-
MD5
9f056c468808e948de3bd2b6b83737a4
-
SHA1
728a2e9e199db95dd75308f4c715997322f91edd
-
SHA256
2688fbba0d62187151772e48affbda149823f3ca170b0e265d208a9272d509ad
-
SHA512
5d7817ccb45453ce0a375647b0d6de25ad1a2b22ac655cfafbfe0d8359a65d13bbdba02c4012018dae4fe964d5b871eb4b09b430267ba916584f9e2b0042a63f
-
SSDEEP
6144:BjIKBmQdSSgBPAzpqjWvmlxjo/gZnrED2cG:hBmQdniP7+GGrScG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.S-aaaf75bd.Eldorado.5714.20408.exe
Files
-
SecuriteInfo.com.W32.S-aaaf75bd.Eldorado.5714.20408.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 214KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE