Static task
static1
Behavioral task
behavioral1
Sample
HA_PDF2IMG2_CZ.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
HA_PDF2IMG2_CZ.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
安装说明.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
安装说明.url
Resource
win10v2004-20231215-en
General
-
Target
13a5944453b4e41406e1440403b9bd44
-
Size
3.2MB
-
MD5
13a5944453b4e41406e1440403b9bd44
-
SHA1
2c679e1008400b824046b5cdd153db8a903df211
-
SHA256
100873f1900fc4fd9239c556c4ceb27894d42a1faeff2b4f4e8b7cc67f1e3876
-
SHA512
787a352c538c145307894f93520b08c0d7f2c1e2cd12bd8c9d967ec7331c51b183158205f26792cfe8b54406302eda3f7fd2057dc6f2959e2d7d497a10a2c8a0
-
SSDEEP
98304:J0u9EaQGOL2PYeQVAecYctNgGDCxYUI0Sk:J0wEaq1eQVAecbtNgSCxgHk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_PDF2IMG2_CZ.EXE
Files
-
13a5944453b4e41406e1440403b9bd44.rar
-
HA_PDF2IMG2_CZ.EXE.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 284KB - Virtual size: 4B
���� Size: - Virtual size:
-
安装说明.url.url