Static task
static1
Behavioral task
behavioral1
Sample
Autodesk批量激活工具_1.2.2.3/Autodesk 激活工具.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Autodesk批量激活工具_1.2.2.3/Autodesk 激活工具.exe
Resource
win10v2004-20220812-en
General
-
Target
16f4898aa1f10043db8e50d298ee04915a683b702c9081a4883a386ce4627873
-
Size
4.8MB
-
MD5
e09fdf3bcefd1e5789bfa2a78d621a5a
-
SHA1
3340ad9d5be84127ad780f233441452ba512a1af
-
SHA256
16f4898aa1f10043db8e50d298ee04915a683b702c9081a4883a386ce4627873
-
SHA512
1da0d5dd7406c6ba711f0bc9e5b799434282cbaedee4d4319ed0e5d02f9e3cc0da0df7b282fb81f69124fc6957e355854bb7df76c2e4a00943534dbe27d23a07
-
SSDEEP
98304:p2tYfecZQlVqej1pzOswvUXRE+jolQTQHJOHqIAzpL/niD1oKczOu:p2Sjsqej1pShj+jNAtIYsBEOu
Malware Config
Signatures
Files
-
16f4898aa1f10043db8e50d298ee04915a683b702c9081a4883a386ce4627873.7z
-
Autodesk批量激活工具_1.2.2.3/Autodesk 激活工具.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 400KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 141KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bpf Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Autodesk批量激活工具_1.2.2.3/BDGroupCore.bpf
-
Autodesk批量激活工具_1.2.2.3/疑难解答.txt