SecuriteInfo[.]com[.]W32[.]Kazy[.]CA[.]gen[.]Eldorado[.]32759[.]31442[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.W32.Kazy.CA.gen.Eldorado.32759.31442.exe
Size

28KB
MD5

adacb7c35dd7f0db650d3bc10edc4a9c
SHA1

07e71f19eeae59645d00ee807d659de2077f2607
SHA256

fcb9dd33b3653acac4b24aa69c9d6059de626e73b942613bdb1489d0f85881c3
SHA512

1ba6fb1dee00c32e11327a763287b02c20be517170c5bf56eca30decbd5037a5ff5def56f71c5c68eb538e032a031ae2c0af642c08d275d7fae0a8e1eb1707bc
SSDEEP

96:YceJcu6GLKkV0H/VyluzLTYM41JXBQVXLEWmoDYvSWXFjUunpC97O4:acWOa0H/0kzIMwXBQVXwgW1wuno97O4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.W32.Kazy.CA.gen.Eldorado.32759.31442.exe

Files

SecuriteInfo.com.W32.Kazy.CA.gen.Eldorado.32759.31442.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE