Behavioral task
behavioral1
Sample
Keygen/xf-adesk20_v2.exe
Resource
win7-20230220-en
General
-
Target
Keygen.rar
-
Size
558KB
-
MD5
71287045145fdffcca1022b962748d9a
-
SHA1
1b3988d975445825c794579f0655403c8d3ed445
-
SHA256
22a24551ce369305fe2cbb671270dd86eee96b5db6a59d21e31b5500b949462b
-
SHA512
4ca20781d5a553fbad9b0a4d98a3a107836b01a5c265ea8711f80e57e9e39bbfd5b8ff611f2620d4495ea5da49cc522c22989a138c1b81a7e17c54a4ca830711
-
SSDEEP
12288:F4sWe/ZY0q9HV1+TgcB0UasIlXQCkpkHTrlpJ9fUvu4vSoSC:FVWuYLNODOjNg0TvV+5
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Keygen/xf-adesk20_v2.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Keygen/xf-adesk20_v2.exe
Files
-
Keygen.rar.rar
-
Keygen/xf-adesk20_v2.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 547KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE