Static task
static1
Behavioral task
behavioral1
Sample
HA_AmigoEasyVC7_CZ.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
HA_AmigoEasyVC7_CZ.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
548088e8c2d5806d90f1eef72e0885b5
-
Size
4.9MB
-
MD5
548088e8c2d5806d90f1eef72e0885b5
-
SHA1
bde671e04d279e7ad64366087aeef528a6e2407e
-
SHA256
9bedf4365ac04c39c252777d863514ee16526459ee5cedee78e6d732a218954f
-
SHA512
cc33e06b3eef13fdc0506ba3f15955d2068c5617271b4b340bc0dc23a088cea8d31524fa73c0a82e52cce8a7d5fae421355483598e03e4e827e0bee58b2e9a02
-
SSDEEP
98304:ps6t5v4Xa2CGz/bxT7eZ78LKoCbyismIvUNPgfZshicyeHcrQhf4HETOVP:ps6tZsOyxmZ784NPiZsZHcrmfYETYP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_AmigoEasyVC7_CZ.exe
Files
-
548088e8c2d5806d90f1eef72e0885b5.rar
-
HA_AmigoEasyVC7_CZ.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
S2C! Size: - Virtual size: 640KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Fox! Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2008 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
新云软件.url.url
-
汉化说明.txt