Static task
static1
Behavioral task
behavioral1
Sample
HA_EasyVide2All1.328_LRH/HA_EasyVide2All1.328_LRH.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
HA_EasyVide2All1.328_LRH/HA_EasyVide2All1.328_LRH.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
HA_EasyVide2All1.328_LRH/新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
HA_EasyVide2All1.328_LRH/新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
29f67507f9760873ffb301151300a7c5
-
Size
3.8MB
-
MD5
29f67507f9760873ffb301151300a7c5
-
SHA1
6da069d33e1dd39c0715a5b2c4744b92851c57a8
-
SHA256
f76f2febb435f38480f5778e7ef041a16b37ae8e6325edc5b577591c8a66ee8f
-
SHA512
e6d57aa7bb92fc7b6346f35a8574296f4ada0766de6387b5c96ffd9a2b9643c6548178ce708111f352c331ba34f854bd8404d6915470cf79b0225214d800bfc0
-
SSDEEP
98304:JsIf7ihBghEEm2Hxp3eHwHTXnMu2yS6gr+Fd0Ve:JdDNhjm2bOQHguLgre
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_EasyVide2All1.328_LRH/HA_EasyVide2All1.328_LRH.exe
Files
-
29f67507f9760873ffb301151300a7c5.rar
-
HA_EasyVide2All1.328_LRH/Easy Video to iPod MP4 PSP 3GP Converter.JPG.jpg
-
HA_EasyVide2All1.328_LRH/HA_EasyVide2All1.328_LRH.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
S2C0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
S2C1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.~s2c Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
HA_EasyVide2All1.328_LRH/新云软件.url.url
-
HA_EasyVide2All1.328_LRH/汉化说明.txt