Static task
static1
Behavioral task
behavioral1
Sample
0d1f4a1a58f2c3ad9a324b52b5df8c66.rar
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d1f4a1a58f2c3ad9a324b52b5df8c66.rar
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
HA_AllokVideo2MP4Converter-402(shw)_CZ.rar/HA_AllokVideo2MP4Converter-410(shw)_CZ.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
HA_AllokVideo2MP4Converter-402(shw)_CZ.rar/HA_AllokVideo2MP4Converter-410(shw)_CZ.exe
Resource
win10v2004-20231222-en
General
-
Target
0d1f4a1a58f2c3ad9a324b52b5df8c66
-
Size
5.5MB
-
MD5
0d1f4a1a58f2c3ad9a324b52b5df8c66
-
SHA1
de7a1e808596644e57582d4f98d6d4eb5e42d648
-
SHA256
32d6cd69810cccbd21ee1dbed81fb993aadcaac55e5f421c25681720048fe02f
-
SHA512
5d55d0635dbcad7a8fe544bd761e39737077bc353657bbccc4b01094dca6d0aa131b5fd772d7bfe01b719e0118ba8c192906bbe7b21897d469f38d3df7c3c201
-
SSDEEP
98304:OCtSGnALMNeQxVB5x9hm4cRBFcQaRG0dmeCEnj4ffYr1rC9xt+xsXn4YAsWByr/O:5nVeQBt+zH0dmUnj4fQrC9xtB4KWBiup
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_AllokVideo2MP4Converter-402(shw)_CZ.rar/HA_AllokVideo2MP4Converter-410(shw)_CZ.EXE
Files
-
0d1f4a1a58f2c3ad9a324b52b5df8c66.rar .ps1 polyglot
-
HA_AllokVideo2MP4Converter-402(shw)_CZ.rar/HA_AllokVideo2MP4Converter-410(shw)_CZ.EXE.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 284KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
-
HA_AllokVideo2MP4Converter-402(shw)_CZ.rar/allok_mp4converter.jpg.jpg
-
HA_AllokVideo2MP4Converter-402(shw)_CZ.rar/allok_mp4converter.md5
-
HA_AllokVideo2MP4Converter-402(shw)_CZ.rar/汉化说明.txt