Static task
static1
Behavioral task
behavioral1
Sample
HA_AmadisiPod113_CZ.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
HA_AmadisiPod113_CZ.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
安装说明.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
安装说明.url
Resource
win10v2004-20231215-en
General
-
Target
46dba3f2a10167bc820ab641b6674c58
-
Size
5.8MB
-
MD5
46dba3f2a10167bc820ab641b6674c58
-
SHA1
f1647841a9fe1fea2c955d10402cd4cc54ad49f7
-
SHA256
b2357152aed824157a48ea0868866a160adf08adfa64a69b260f9d59d4f17a1b
-
SHA512
d9edd06be959df0418b2fbdd6f8afe2195c5782ce99abbf50c07baa20ab4ae61ba81fc8a0fbd82e7ba816e0369051b3f71f5d123e0d5299c9c910db7ec94b21f
-
SSDEEP
98304:pB3YPABT9NV9J3ReIYWhBtppvE9HBC3PI3jh69POFZ1JHyJVPN1Xv7mH:H3YgVvBeAfpvElB49QZ1JSDPNlv7mH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_AmadisiPod113_CZ.EXE
Files
-
46dba3f2a10167bc820ab641b6674c58.rar
-
HA_AmadisiPod113_CZ.EXE.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LordFox Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FoxLord Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
安装说明.url.url