Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.MSIL_Agent.IVS.gen.Eldorado.20843.16872.exe
Resource
win7-20240903-en
General
-
Target
SecuriteInfo.com.W32.MSIL_Agent.IVS.gen.Eldorado.20843.16872.exe
-
Size
774KB
-
MD5
c99b273484801b23ec0a037347cc63d4
-
SHA1
7724035bdc210a16142812a3e58a24f46b533478
-
SHA256
d9dc8cf4f0c34bff044cc82267d7480d8c565c5299f1e5c35547f7eb866fc49b
-
SHA512
4876038789c002ed24bc3377e71437bdda76adcf3ad0b207309a2b7650dde4a27bf5cf2b59762412c4b23e06f2a83978f9fa67e6ecb3c38bffd613f09d89e2cb
-
SSDEEP
24576:yU2prkC5LF9wQ8q57ZcBASdzJ0WKD2Erk:lSgwLj5576qSdl0WKSU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource SecuriteInfo.com.W32.MSIL_Agent.IVS.gen.Eldorado.20843.16872.exe
Files
-
SecuriteInfo.com.W32.MSIL_Agent.IVS.gen.Eldorado.20843.16872.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 765KB - Virtual size: 765KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ