SecuriteInfo[.]com[.]W32[.]MSIL_Kryptik[.]DSR[.]gen[.]Eldorado[.]16905[.]957 | Triage

Sharing

General

Target

SecuriteInfo.com.W32.MSIL_Kryptik.DSR.gen.Eldorado.16905.957
Size

1014KB
MD5

866b85b3ade98e5dd7842e3c32b8241c
SHA1

0f866ef62fb1db837a635144cdde91b7b24ab9a0
SHA256

a17707c4a5a15c83eb178719fae6606a62ab9b0ded71a01ce9b44302f22e3341
SHA512

a7871da61e61db5c778e4f371adf19106a118a226ec41068f0e022ce64121f720697fdf3f819a36fe94352e8f2c7111d9e9ef91e6299f4f3cc720bfee526f3d9
SSDEEP

24576:FUCTQvNZPLsLlNgw2WgT+cLtqHgTLwq5Qf:FnQvHQBSPtXqATLQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.MSIL_Kryptik.DSR.gen.Eldorado.16905.957

Files

SecuriteInfo.com.W32.MSIL_Kryptik.DSR.gen.Eldorado.16905.957
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1012KB - Virtual size: 1012KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ