Static task
static1
Behavioral task
behavioral1
Sample
H_SWFText1.2_Raindy.rar/HA_SwfText130_CZ.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
H_SWFText1.2_Raindy.rar/HA_SwfText130_CZ.exe
Resource
win10v2004-20231215-en
General
-
Target
636a4767924956f3de0dd153513b28bb
-
Size
2.9MB
-
MD5
636a4767924956f3de0dd153513b28bb
-
SHA1
cf5ab4fba8f89f7632b07c0aae45e759774069c4
-
SHA256
97ec3202e6381cf07584e686d2bf89bf6821f2834244e87b8ae694c2059694eb
-
SHA512
ac394d5a8ba77982a1e04168f3aa4b4f73384ba0abc373ae831a96bdea66125f44c34a9005985d8f084b6ee7f11f85cb4b9414c1816dcefa8c9b11733fb3f6f2
-
SSDEEP
49152:5nlpk443YMs43QcZCWPAGodAWlf3z6xcQUBK4W1VQSdEv/HvYphswd6IJCd:VleYM0eBg76xebW7ndsHApWWl2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/H_SWFText1.2_Raindy.rar/HA_SwfText130_CZ.EXE
Files
-
636a4767924956f3de0dd153513b28bb.rar
-
H_SWFText1.2_Raindy.rar/HA_SwfText130_CZ.EXE.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 284KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
-
H_SWFText1.2_Raindy.rar/swftext.jpg.jpg
-
H_SWFText1.2_Raindy.rar/swftext.md5
-
H_SWFText1.2_Raindy.rar/汉化说明.txt