Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.27233.28774.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.27233.28774.exe
Resource
win10v2004-20240226-en
General
-
Target
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.27233.28774.exe
-
Size
8KB
-
MD5
1e014a78b5dc663933ee0d88d9132cd7
-
SHA1
dfc798a2ee7c76e87e21828acdeae6e8fae824ea
-
SHA256
19cd6b1c0044b898548ee0b19f7122f3ef305a4ca2d1e1ecec0e870d7e27ea69
-
SHA512
7194d36bb181dd4d8ace4380803cab172dad711c9069a6a10c8aecb9d50b7d9ab19024d7eef8034a0d0ffc48080daa11922dc50117bdeba9d667643da80000e4
-
SSDEEP
96:YStABWnW5Dfv+dBjDDj8b35bzy3fcgtWW:buBWWZ+fDGl4D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.27233.28774.exe
Files
-
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.27233.28774.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 7KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE