Behavioral task
behavioral1
Sample
xf-adsk2015_x64.exe
Resource
win10-20230703-en
General
-
Target
xf-adsk2015_x64.exe
-
Size
321KB
-
MD5
015a355a7890a08dfb38868f8a45610a
-
SHA1
c91e544455d4a513bd46794531785fbdf4ce05dc
-
SHA256
71baab951f223bcd95039cc838e959469d0d770b62c0479e3e62bb4ede677a99
-
SHA512
6d2c9b86dc375b8c27590316e869d36e67a8cae67e8930617c058677f46aabc780e88f71530eebd3743701d9bdad8add073747596703297dca11b0fd88ee8fe0
-
SSDEEP
6144:ZMEuEWdCgGPVw7wzXfx2iK86fRy4rJlnro0ZHYnQ0Gk0B/v3oSf:KEuE7gX7w12ySXZQ0B//oSf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource xf-adsk2015_x64.exe
Files
-
xf-adsk2015_x64.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 904KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 311KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE