Static task
static1
Behavioral task
behavioral1
Sample
ha_winxpsp-233_cz.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ha_winxpsp-233_cz.exe
Resource
win10v2004-20231222-en
General
-
Target
7c303eaf04907c0edbb042123503dab7
-
Size
2.8MB
-
MD5
7c303eaf04907c0edbb042123503dab7
-
SHA1
2772d3838dbede5a7c41b02a97a4ce18a55e2946
-
SHA256
d1456248b79d493de2669cf97f35c9c45917d368b1e93bf13e6d0ee437546f2f
-
SHA512
350656af9e1f7b33054c4ce087dde4b4fd3007876d0216c8c1434e55f69f680913f9b3f872d081012030de92b5a19d2e12bf7f20505fa08da07e6c349ad4320e
-
SSDEEP
49152:FyM1j6T2JR9rC8SMXZ27J3pr5y+4D42i7Ayo9oHgvWkRH/leBkJb1rTCxQR7u4tP:FyMdMkAAaJOXDJi7ADCHgT/DN5mw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ha_winxpsp-233_cz.exe
Files
-
7c303eaf04907c0edbb042123503dab7.rar
-
ha_winxpsp-233_cz.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 280KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
-
下载说明.htm.html .js polyglot