Static task
static1
Behavioral task
behavioral1
Sample
HA_KingdiaDVDTo3GP1.513_LRH.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
HA_KingdiaDVDTo3GP1.513_LRH.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
安装说明.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
安装说明.url
Resource
win10v2004-20231222-en
General
-
Target
04ed0ed57bfb1f3f7a59177c5f9b7037
-
Size
4.6MB
-
MD5
04ed0ed57bfb1f3f7a59177c5f9b7037
-
SHA1
180c49f9ad86b27b40d89f4f3ab0b1cce6577aa5
-
SHA256
83623ecee6afb20c67b657f883638be1eb7dc6a0a579a472c41ee14fd1880748
-
SHA512
b7ada54a1f6268fe791dc012bfecd3480d47c7f38a996dbf11c2d087f67e2e3c625391dedee84d169ea01300dc9ef7417d93446d2588a4c727bc10fcbcfd2d33
-
SSDEEP
98304:z0y7al7UFokYIxc0QxnNWBmlkBxcLOEr3vWLv7Ici5UhW/ycwSGu:hojoBmlkLwOEivIc30/yc0u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_KingdiaDVDTo3GP1.513_LRH.exe
Files
-
04ed0ed57bfb1f3f7a59177c5f9b7037.rar
-
HA_KingdiaDVDTo3GP1.513_LRH.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.[S2C] Size: 346B - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Inst Size: 30KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
安装说明.url.url