Behavioral task
behavioral1
Sample
xf-adsk2013_x64.exe
Resource
win7-20231023-es
Behavioral task
behavioral2
Sample
xf-adsk2013_x64.exe
Resource
win10v2004-20231023-es
General
-
Target
xf-adsk2013_x64.exe
-
Size
323KB
-
MD5
4459d055507edf234144afb8d8cbb037
-
SHA1
9641d9750ba496da27bddea16106f64915d0686b
-
SHA256
b216fb62d0b16de6b5c144bd6ea0882f3efd42e413ad10020cd6fca9f367c6ee
-
SHA512
2a5e7883d18e4226b5229823698d1ccab8322e5223d1d75e361c9184f31a3fa5f89db2e976f864fdda478d3d5db4aa353a446f7287f57646db8d6ab21a16b2be
-
SSDEEP
6144:lneI2QVjHyt0qJk1Z147j6k14dsJKS5Py+nRF+w:leIBTyt0qA147j0+UmaAf+w
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource xf-adsk2013_x64.exe
Files
-
xf-adsk2013_x64.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 198KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 5KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.IZCraZ Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE