xf-acrodc2015[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

xf-acrodc2015.exe
Size

367KB
MD5

f384ffcea17f9c27aef484fdb506e030
SHA1

cc8955f8057c40aa542cacc8caa3499399ac0e51
SHA256

97dece34ea390c89b36065b6f96a83c5b139e47c9a0c411c030971958c1e808b
SHA512

a60279eeb0fcb14ea920c99a590a7ff118f11a5ff7175e0119ab859568c47793dc3292190baf685fc4cdf1e6c2d2d5d43c4735ede81b70d90a74920b0b1bb502
SSDEEP

3072:HRwoRBSZDyjhFjiNzqsRR0gJINV1SFoHysOtjRRbByFGcIil4wv6nCmagX+z:HRwZZyjERR0gJIpSQy4l5v6nd9X+z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xf-acrodc2015.exe

Files

xf-acrodc2015.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ