Behavioral task
behavioral1
Sample
XF-asdk2020.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
XF-asdk2020.exe
Resource
win10v2004-20221111-en
General
-
Target
XF-2020.rar
-
Size
403KB
-
MD5
8f7c31dfac997bf5c4e4b04e71d34a74
-
SHA1
7af7940b6b3be7bdb9fcaf23697fd9bed1da3dc5
-
SHA256
9c12c8a4b3c9d81fabf6d28a1ccbeaa71595c9b1e95de57c506be34227d3993c
-
SHA512
a2ad4db667ce21c8fc6d114896626752e34a301af0d170bb1e5919aa01968cc03f0e88574ae9d86c46fed6d79be1539ccc3ea8670ec0f103db5fcc09a363eaa7
-
SSDEEP
6144:Y1DvbAiilHJIr0PVsaST3lBdhDD9LcAPTyVSqmy/nP2QCiqMwT7u3L7JtAz:0DErlH2rHTVlD9L5PTG3fP2Q3L7/Az
Malware Config
Signatures
-
resource yara_rule static1/unpack001/XF-asdk2020.exe upx
Files
-
XF-2020.rar.rar
-
XF-asdk2020.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE