Static task
static1
Behavioral task
behavioral1
Sample
HA_RealConverter7.7_LRH.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
HA_RealConverter7.7_LRH.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
8bef5402c26ce3597a0484351f7a01a1
-
Size
3.7MB
-
MD5
8bef5402c26ce3597a0484351f7a01a1
-
SHA1
e6ee7bda0d6fdae21f036947cccbf36bdeaa741a
-
SHA256
10986d568fff016896f94890f79ea1516f920159f6ec6b622e03772d3f29132b
-
SHA512
30e54b2ea9782191b10440fd3e01cb4c97ebe2f789dbe051590d8dd9baebeea77098543e006bda6f3ffbbbae203c7d698e618b0949f2ecebe52eff817e6c63b7
-
SSDEEP
98304:EB19GXDMKg3Au3EBOVOlbm8MQHEArKRhoWVLS7h2FwrwBTPqL:EVGXDMKg3RUBOVWDMWEkKnoWgmwrwBj2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_RealConverter7.7_LRH.exe
Files
-
8bef5402c26ce3597a0484351f7a01a1.rar
-
HA_RealConverter7.7_LRH.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
S2C0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
S2C1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.~s2c Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
新云软件.url.url