SecuriteInfo[.]com[.]W32[.]Graftor[.]B[.]gen[.]Eldorado[.]11295[.]28110[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.W32.Graftor.B.gen.Eldorado.11295.28110.exe
Size

1.4MB
MD5

826f583cfb4d78d1397cb8dd67deb578
SHA1

27fe190d64cc8ad1a99d192e6c711af14d73f931
SHA256

32e9a3ccce73c449e6053159fdb30a822e4bc7ddfdbb246936c3b711f22828b7
SHA512

2a311082e5e26df07a2798b989a9f3c0abe514c2b3de2f7cb70581e9ace7a85f0b208ce688ada79d22329a36015610efce3f0ecd6d3b6546f8a30aa919f03dc1
SSDEEP

24576:P4NArgmm5L1srVDbT5s0Txj4+afPPZs8kN4mezTJtlWdgp/:+b1qhf5sI2KFNwnogp/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Graftor.B.gen.Eldorado.11295.28110.exe

Files

SecuriteInfo.com.W32.Graftor.B.gen.Eldorado.11295.28110.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 908KB - Virtual size: 908KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ