Static task
static1
Behavioral task
behavioral1
Sample
HA_aMacAddressChange53_CZ.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
HA_aMacAddressChange53_CZ.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
安装说明.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
安装说明.url
Resource
win10v2004-20231215-en
General
-
Target
2bafa08629713e97faba5d93ce9f35d0
-
Size
1.8MB
-
MD5
2bafa08629713e97faba5d93ce9f35d0
-
SHA1
6905cfb6f7983d9ba5adc6b78ce12817a89a9e95
-
SHA256
918954c8a361cd5203334025fab959e7466cc6081922b62197b2c5be0d02d330
-
SHA512
cc561253a5ea94543b7733164e01b8b48619a9ab4be402d8d77d954a8af0b5ad32f58fb6179319f403a37b7d96de30bbf4a6e606055f6ecff02c15bbee3e3dee
-
SSDEEP
24576:ynttfbYVK7TYaD20vvvnb+ucVyCnSo9pvibEQeA+KRpUAT9Eh7tNY/WYTbDl7w/b:y/YITYaFKVyCnSot9y3y6xjl0IqcQQUr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_aMacAddressChange53_CZ.EXE
Files
-
2bafa08629713e97faba5d93ce9f35d0.rar
-
HA_aMacAddressChange53_CZ.EXE.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 280KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
-
安装说明.url.url