Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.A-62389890.Eldorado.13691.8349.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.A-62389890.Eldorado.13691.8349.exe
Resource
win10v2004-20240226-en
General
-
Target
SecuriteInfo.com.W32.A-62389890.Eldorado.13691.8349.exe
-
Size
38KB
-
MD5
5f24ac5410a1427d43dc895c5e2f3962
-
SHA1
cc4cd1c6d9f12341b3e0393fcd40b7a197c34936
-
SHA256
01aa6bb05f83872a698be735af0243165d291ba838d35c9bd7f1ec38ad66704d
-
SHA512
c9b9704f4dc6ae64571d8268e0bd5c1ae3ca0a35a17195e1b18e09ada6f2cc6687a106f93b6c8ef5251f771d90e1d7aaf7c9ace136008fa373607666f6baec47
-
SSDEEP
768:HC+q5Qmw/IaZ6UUN6en9a8P/m3FlUwqMXkGEwaS3lntIt:i+q5QsmJk88cRqWna+2t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.W32.A-62389890.Eldorado.13691.8349.exe
Files
-
SecuriteInfo.com.W32.A-62389890.Eldorado.13691.8349.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam02 Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam03 Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam04 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE