xf-adsk2018_x64v3[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

xf-adsk2018_x64v3.7z
Size

851KB
MD5

4066555291fa1f40b3913b601baaf175
SHA1

b18ee51c07d060a5ce62478a02591ea945e8c772
SHA256

a5d44568665d209ccaf78842240cb33c88b502dcb4fccd219cfddf24c811973d
SHA512

e30965525f4aab28db9f9045c3882eac0c47d54cfad4f019b68a1be18029aff2404f4ac6e9c0e63c6ec537ff8f49961b037f600959f0a442b7ca907c77930e71
SSDEEP

12288:T5PzYQsBvwapzGQ5IhNDW0GFTqeuEdYSE+OeO+OeNhBBhhBBShVpF1h1LI4foUBc:FbY2YIhNDW0GFT6E5ohVpfjfoUBgnZ8g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/xf-adsk2018_x64v3.exe

Files

xf-adsk2018_x64v3.7z
.7z

Password: 12345
xf-adsk2018_x64v3.exe
.exe windows:6 windows x86 arch:x86

Password: 12345

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 546KB - Virtual size: 546KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ