Static task
static1
Behavioral task
behavioral1
Sample
HyReader.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
HyReader.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240226-en
General
-
Target
cb974ab8162c8aac3acc3f68ee755a04
-
Size
5.6MB
-
MD5
cb974ab8162c8aac3acc3f68ee755a04
-
SHA1
4f4ee3b9ba283b9532645322e9104b1b44a0f2e3
-
SHA256
ac44997946ff68427239b5e9afc193fe828e033226115739de54431023d01fad
-
SHA512
28d693b62739dbf4b70629a94048635b959b54ca50943458ccb92fb1b8799733b7d12d1575567aa9dbb28caa46ab6c70002b14a551910f54c9cd4e4e13ebbb35
-
SSDEEP
98304:f8Fc0nDzcXS8g8s3MnEz/czrFINWafVPsyKbPZ4+BPxa3Dgd++j2KQb9x8lj7:f9UYXS8g84MEz/czrFcNIbPZ4cJM5+yw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HyReader.exe
Files
-
cb974ab8162c8aac3acc3f68ee755a04.rar
-
HyReader.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
新云软件.url.url