SecuriteInfo[.]com[.]W32[.]Xpack[.]E[.]gen[.]Eldorado[.]22834[.]15056 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.22834.15056
Size

112KB
MD5

f039bd252cdf307a8c42c7a7547e95b4
SHA1

5aed322cf180e4a77fc4e048f5129f1cdf29ef2a
SHA256

70540018e5f4d5e3253ef086595b46e3c9f9f33926384f70bccf888a7f3e07cf
SHA512

e3dff35f4495be353c7109f1f8674778b8b61a4340fc936252f7441c0e78631fcfd0f29cfe28fdb99d5d059d8b2d783b67e2f02aca4071ceddfde3fd60335e66
SSDEEP

3072:0rmPSUAcsNYzQrDi3IF0FB0GstUD1km4slL:VqtC0DiNLL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.22834.15056

Files

SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.22834.15056
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ