AutoCAD_2023_English_Win_64bit_di_en-US_setup_webinstall[.]exe

Resubmissions

15/02/2023, 22:26

230215-2cq5csee45 10

15/02/2023, 22:16

230215-16ta5see23 10

Sharing

Copy URL Twitter E-mail

General

Target

AutoCAD_2023_English_Win_64bit_di_en-US_setup_webinstall.exe
Size

11.5MB
MD5

554ffe7e92e8074f7dddbef953622e45
SHA1

c4af0cde3ad56bf040b34af7cf3d2afeef3f4810
SHA256

27d0ed17d39330aaaebce886299cd5c5a46cc9e34884dabedd08638da592c8d4
SHA512

dfdcdda0d6e3031e7a478e28611420a1c52a5c5054328796cab4f9d661de4a213e211592e361be77b9bd7f3df1f9ad3843a2ccfd05d3459b8940d74a251b5a49
SSDEEP

196608:pNc0r8WDkOe6+/HtiPelzuMAJd6W4Esa7wifouWOXZv+dSPeEd0plut9sHT9GApN:pHrJkv6+1ye1uMAJd6SX7waWOJmdSPP2

Score

1^/10

Malware Config

Signatures

Files

AutoCAD_2023_English_Win_64bit_di_en-US_setup_webinstall.exe
.exe windows x86

da37b5779e1d62ef38a0b2bf23f7d88b

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:72:33:14:23:88:6b:06:cd:29:c7:dd:fc:93:50:db
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17/01/2023, 00:00

Not After

16/01/2024, 23:59

Subject

CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

c1:95:90:e4:0f:4d:09:09:91:f3:81:3e:db:0d:83:fd:08:54:b9:5f:95:24:82:ad:60:a0:b6:22:3a:2e:45:e9
Signer

Actual PE Digest

c1:95:90:e4:0f:4d:09:09:91:f3:81:3e:db:0d:83:fd:08:54:b9:5f:95:24:82:ad:60:a0:b6:22:3a:2e:45:e9

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US

07/02/2023, 20:39
Valid: true

Chain 1

CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

shell32

ShellExecuteExW

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memcpy
free
malloc
wcscmp
memcmp
memmove
strlen
wcslen
wcscpy
wcscat
memset

kernel32

CreateProcessW
GetStartupInfoA
GetModuleHandleA
GetSystemDirectoryW
lstrlenW
lstrcatW
LoadLibraryExW
GetModuleHandleW
GetProcAddress
GetVersionExW
SetFilePointer
WriteFile
ReadFile
CreateFileW
DeleteFileW
FindNextFileW
RemoveDirectoryW
FindFirstFileW
FindClose
GetModuleFileNameW
GetCommandLineW
GetTempPathW
GetCurrentThreadId
GetTickCount
GetCurrentProcessId
CreateDirectoryW
GetLastError
SetFileTime
SetFileAttributesW
GetExitCodeProcess
WaitForSingleObject
CloseHandle
SetCurrentDirectoryW
GetCurrentDirectoryW

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 542KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

da37b5779e1d62ef38a0b2bf23f7d88b

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

04:72:33:14:23:88:6b:06:cd:29:c7:dd:fc:93:50:dbCertificate

Extended Key Usages

Key Usages

c1:95:90:e4:0f:4d:09:09:91:f3:81:3e:db:0d:83:fd:08:54:b9:5f:95:24:82:ad:60:a0:b6:22:3a:2e:45:e9Signer

Signature Validations

Verification

07/02/2023, 20:39 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

msvcrt

kernel32

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 8KB

.rsrc Size: 542KB - Virtual size: 542KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:72:33:14:23:88:6b:06:cd:29:c7:dd:fc:93:50:db
Certificate

c1:95:90:e4:0f:4d:09:09:91:f3:81:3e:db:0d:83:fd:08:54:b9:5f:95:24:82:ad:60:a0:b6:22:3a:2e:45:e9
Signer

07/02/2023, 20:39
Valid: true

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 8KB

.rsrc
Size: 542KB - Virtual size: 542KB