Static task
static1
Behavioral task
behavioral1
Sample
ha_fseeker2_cz.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ha_fseeker2_cz.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
66ec3a6f3f15bb8b63c41fad0d9ea2ac
-
Size
2.2MB
-
MD5
66ec3a6f3f15bb8b63c41fad0d9ea2ac
-
SHA1
9282dce9fbff73348fa62f70d55a9be68395599e
-
SHA256
5912a005f25b782fd77b785be31834dd032d063d1e9cef271b9a881a82d297f8
-
SHA512
ee8b05a2f7d008bd02e197aa777bf3275f4c29fc68978845bb42cb2d5b6cd7f9f9a8c8a464617d898fe82b0f72650b3369dbab6850f05a4ad9e9b778e3f95f4a
-
SSDEEP
49152:F40LV5890H9v/+mGusAxuPjfgRhEr0zlfpB3S9z3/VFXRORX1dJcuobyh5FnqnDY:vLSG+m7s1jfgRGrgd3S9zvVFXRORXncg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ha_fseeker2_cz.exe
Files
-
66ec3a6f3f15bb8b63c41fad0d9ea2ac.rar
-
file_seeker.jpg.jpg
-
fseeker.md5
-
ha_fseeker2_cz.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 280KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
-
下载说明.htm.html .js polyglot
-
安装说明.txt
-
新云软件.url.url
-
汉化说明.txt