Static task
static1
Behavioral task
behavioral1
Sample
HA_ApolloDVDCreator427Plus_CZ.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
HA_ApolloDVDCreator427Plus_CZ.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
73bb47906e963dfad6aac2b43f556ce0
-
Size
7.8MB
-
MD5
73bb47906e963dfad6aac2b43f556ce0
-
SHA1
4b0ea9d773fd7c4fea9fa60c8bae09c4fbb301fd
-
SHA256
3ce1734c31a23cb5c872739b1c905f35b4f4ac196693d31d7f03a4cf9f1bb0fc
-
SHA512
dea2c864fd5f5c508f2a6cd2656eae7d28f00ec719367e8987aabe5f749660432d687c1bc61efe9df3f2d87fbc587db7dda5f90d2b4ad597abae27a9c49d6367
-
SSDEEP
196608:oiMPmqS9k23/GSzAhndY26nSELpnLb+buMVuJG7:ePak23/GkAhGUKL40Js
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_ApolloDVDCreator427Plus_CZ.EXE
Files
-
73bb47906e963dfad6aac2b43f556ce0.rar
-
HA_ApolloDVDCreator427Plus_CZ.EXE.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
S2C0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
S2C1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.~s2c Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
新云软件.url.url