SecuriteInfo[.]com[.]W32[.]Trojan[.]FWF[.]gen[.]Eldorado[.]2850[.]19434[.]exe

General

Target
SecuriteInfo.com.W32.Trojan.FWF.gen.Eldorado.2850.19434.exe
Size 172KB
Sample240702-3mpjyswapf
SHA256 dd6f8daddb7da0e8b9be526fc3aa9c5f0808fe6926ca7a9648464f9b4f8140e1
MD5 17cb739c8fd07235fd29fbaab85e7777
SHA1 bb8b921acb8cce657068485c5d55f411318b7955
SHA512 bbbae466825bc0b104e359cceb8c199fcee60cab406af6609fa76836dbd154840d84b0a1c3d725ba5378b1742e2c6b29ae38a1bf0f00488bb0845f96ab8cc312
SSDEEP 3072:MZ5xLNH3z7d9PdCXLDCcb4BFD1jXhPtP5auNDW1KuU3:i5xLNHcXPCcb6Tp7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Trojan.FWF.gen.Eldorado.2850.19434.exe

File Explorer

SecuriteInfo.com.W32.Trojan.FWF.gen.Eldorado.2850.19434.exe

.exe 172KB

SecuriteInfo.com.W32.Trojan.FWF.gen.Eldorado.2850.19434.exe

IMPHASH a2f98760372f92ec7255c044ca187eb8
SHA256 dd6f8daddb7da0e8b9be526fc3aa9c5f0808fe6926ca7a9648464f9b4f8140e1
MD5 17cb739c8fd07235fd29fbaab85e7777
SHA1 bb8b921acb8cce657068485c5d55f411318b7955
SHA512 bbbae466825bc0b104e359cceb8c199fcee60cab406af6609fa76836dbd154840d84b0a1c3d725ba5378b1742e2c6b29ae38a1bf0f00488bb0845f96ab8cc312
SSDEEP 3072:MZ5xLNH3z7d9PdCXLDCcb4BFD1jXhPtP5auNDW1KuU3:i5xLNHcXPCcb6Tp7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW GetModuleHandleExW SetVolumeMountPointW GetComputerNameW SleepEx GetCommProperties GetModuleHandleW GetTickCount ReadConsoleOutputA GlobalAlloc GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW GetModuleFileNameW ZombifyActCtx GetLastError GetProcAddress BuildCommDCBW GetAtomNameA LoadLibraryA UnhandledExceptionFilter InterlockedExchangeAdd SetFileApisToANSI AddAtomA FoldStringA lstrcatW EnumDateFormatsW FindFirstVolumeA GetConsoleAliasesW OpenJobObjectA CreateFileA GetConsoleOutputCP MultiByteToWideChar HeapReAlloc HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection Sleep HeapSize ExitProcess HeapCreate VirtualFree HeapFree VirtualAlloc WriteFile GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile InitializeCriticalSectionAndSpinCount RtlUnwind GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle CloseHandle WriteConsoleA

gdi32

GetBoundsRect

ole32

CoTaskMemRealloc

Sharing