Static task
static1
Behavioral task
behavioral1
Sample
HA-AplusD2PS_v828-FzH/Setup.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
HA-AplusD2PS_v828-FzH/Setup.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
HA-AplusD2PS_v828-FzH/新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
HA-AplusD2PS_v828-FzH/新云软件.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
HA-AplusD2PS_v828-FzH/汉化反馈.url
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
HA-AplusD2PS_v828-FzH/汉化反馈.url
Resource
win10v2004-20231215-en
General
-
Target
141f69c4963e4c9d72af767747632849
-
Size
4.5MB
-
MD5
141f69c4963e4c9d72af767747632849
-
SHA1
cc0a67672fcd6c61c8dd7668819d85a5c9d1023c
-
SHA256
ede1de2a396e9270892ccf9cfc04b80a4fed241bf73e46dcf03b5ea76ede4ffa
-
SHA512
fefeb459798d7e65b84911474bae7d51f31e07502a02d96b665b1efaaf9be633730848fc0e982cab23beee32a851cf33fb06c0ba6918a03cb67533a6bdc1af14
-
SSDEEP
98304:ftRsOMqwhcHT7iUHVSfvGtlBeVC/jHYNLN5uWkTfgmMaYBXeAByGMJoi:0OWmz20VK8UC/jH0ahTkaGBUNoi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA-AplusD2PS_v828-FzH/Setup.ExE
Files
-
141f69c4963e4c9d72af767747632849.rar
-
HA-AplusD2PS_v828-FzH/AplusD2PSP.jpg.jpg
-
HA-AplusD2PS_v828-FzH/Setup.ExE.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.S2C Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FzH Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
HA-AplusD2PS_v828-FzH/新云软件.url.url
-
HA-AplusD2PS_v828-FzH/汉化反馈.url
-
HA-AplusD2PS_v828-FzH/汉化说明.txt