SecuriteInfo[.]com[.]W32[.]MSIL_Kryptik[.]AHX[.]gen[.]Eldorado[.]4161[.]12073[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.W32.MSIL_Kryptik.AHX.gen.Eldorado.4161.12073.exe
Size

792KB
MD5

8f82e7b7998e3094b6eed361187e2c75
SHA1

6704ea3237d4eaee9464ac23fd71e99cc16b0a12
SHA256

7c78dbbe1e5f2e1f192c9a41d21107c041c69c3da74a5c8f69cdda4cdd3b2e4a
SHA512

62a10b3db1fcf73626664c9fe738edb5203300407a12357e5ae5af96f9588635cccbb902c030725afde8916ea1895b1e6fc93a7bf078666a5d3a5dd6b912d81a
SSDEEP

12288:65ipHWETTw4WUTn4/Bz8PvEMHqfDxjKZ3u5z/YfXsaWja:GiFhvcBwvfuBdY/JWja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.MSIL_Kryptik.AHX.gen.Eldorado.4161.12073.exe

Files

SecuriteInfo.com.W32.MSIL_Kryptik.AHX.gen.Eldorado.4161.12073.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 631KB - Virtual size: 630KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ