General

  • Target

    h4.zip

  • Size

    4.3MB

  • MD5

    028621ae475fd3af1a60284f084124d9

  • SHA1

    c18e6adf2c75f108a1bf98d534068ec424acc964

  • SHA256

    feef7c585a67e368ce1a514158d6abc280e502b0408ad8b589d83687360ff11f

  • SHA512

    e671e9998d8f3b938084e4cb0fed175c7f3ac009917989cace6af1c7a512ff207793534c1b03cc220f5da4173bc084ee508c5ac7e6154c4bc9a285a6974ecdc2

  • SSDEEP

    98304:YfFBwV9Z9WRhoq9BQFSyd+doJTTL/alHFBwV9AfYbSdxHHkF:aebaT9kIonL/KeWfYmdxkF

Score
10/10

Malware Config

Signatures

  • Detects PikaBot botnet 2 IoCs
  • Pikabot family
  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

Files

  • h4.zip
    .zip
  • 00ad95ca939f4fbb3452ea300bb919ef18cbde843604d7148fa165b645c3030e
    .dll windows x86


    Headers

    Sections

  • 05d1b791865c9551ed8da6a170eb6f945a4d1e79cb70341f589cc47bacf78cc3
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • 2411b23bab7703e94897573f3758e1849fdc6f407ea1d1e5da20a4e07ecf3c09
    .dll regsvr32 windows x86

    2f7d1706341a4c1a58fd983f48b245ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 31d025c022dfa29f0d953d477a5cefebe91bf28e60fa771b407cc0b25dd65355
    .dll regsvr32 windows x86

    2f7d1706341a4c1a58fd983f48b245ef


    Headers

    Imports

    Exports

    Sections

  • 3b0dce669a07626746d3b2301607702abd3bb2cba8dcb9c8b655f246e7b8ab1d
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • 3ba484fd9430dda5ea691c86ed0cd6e95f1e401d7b444c0d6465545a03ae20b7
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • 443c727f45873a83f2b236cafa7781439e0ce9a25120d01621a812af15934ffd
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • 4bc3d95ee8661f7d381b2ceb6cb4a6e9759d7d0f9d883b44528b0f9c0aa559a2
    .dll regsvr32 windows x86

    2f7d1706341a4c1a58fd983f48b245ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 4d81b964b809d1d3c642d331f17f80ee013fdd2b8bd2cffd191449313ea92353
    .dll regsvr32 windows x86

    2f7d1706341a4c1a58fd983f48b245ef


    Headers

    Imports

    Exports

    Sections

  • 4fb5b0da3a557a7dac922010a2b888a91055c4381cf494a6336a674be3bb4a45
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • 50d0a3b32e813c671248f0f2fe10c3c237ee94bfa94fcaf86886fc3a64d79b88
    .dll windows x86


    Headers

    Sections

  • 59f42ecde152f78731e54ea27e761bba748c9309a6ad1c2fd17f0e8b90f8aed1
    .dll regsvr32 windows x86

    47b25cab4d220854dcb1268c5af427d5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 5a76edd4bf074cc6a66199f87896dee330a81164d112605681ccb145d64cd587
    .dll regsvr32 windows x86

    f1c2f5370d0009f10adb6d65fdcaaa38


    Headers

    Imports

    Exports

    Sections

  • 610e854b8c98ab9fd11985f3468eababee930d0bc695cc596f7a2b0e92b25f19
    .dll windows x86


    Headers

    Sections

  • 644a054d1f42e129007fbe1ed445e1f36cc84737727e1d842530e16aec7c37bc
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • 802a953fdb8efac8ec2a48bb8051713eb23edf962a10640d144206fea99b001f
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • 8528b4fbb050be27debef474bd27d441d92196f5d19840f94afa979e8483c8ef
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • 9754d73feff432298ab129b21a09faa38c3a4ab9a480dbef2eb58dd7d4a151b0
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • 9c066b18b2cef503b177f12caf769df6b473a1ee599ff1e32549c2e4ab45b7d8
    .dll regsvr32 windows x86

    2f7d1706341a4c1a58fd983f48b245ef


    Headers

    Imports

    Exports

    Sections

  • 9eafa6bbe7cbf0413b36993e97901c704b5217ef43e2172cb843bd9699719882
    .dll windows x86


    Headers

    Sections

  • a383c00d4afce7703d884042f3556c71e8765f087ae1e398be4c9c4f163f4678
    .dll regsvr32 windows x86

    2f7d1706341a4c1a58fd983f48b245ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • a7122f6a2953f7c5960747cc165308fc3a33a7cb5e6b0093cff2855db2ecce7b
    .dll regsvr32 windows x86

    2f7d1706341a4c1a58fd983f48b245ef


    Headers

    Imports

    Exports

    Sections

  • add0e82c68959b9c88485da47178295d80bd6752dd7f0dd4c62cf80bdbf1939c
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • b65009a7596afc021e95a290be757338f1d45bec0dd5e3197a242a77c0443d9f
    .dll windows x86


    Headers

    Sections

  • c15c4a73728ea1b3e6688066bb1fdea841d42b910fb2883289cb26003474af64
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • c24ecd199e5e39cb7daca5e79b7af82f06fe4c2a32409c5053145b67dc0088c5
    .dll regsvr32 windows x86

    2f7d1706341a4c1a58fd983f48b245ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cd6b1d3ea4540494866d5b51149de0aaa22e65a2ef5001421190e4a0ce6ec5c8
    .dll regsvr32 windows x86

    2f7d1706341a4c1a58fd983f48b245ef


    Headers

    Imports

    Exports

    Sections

  • dc0bc5af6c5323ff1e242c7f8485f1bcd393860d50494bdaa84eea9ea606b2bb
    .dll windows x86


    Headers

    Sections

  • e8c7d64a29182d3f84a956ed5bb8a8abc2b5459fa939eb17b00c9513240c817e
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • ec3399ed009ffc80cd4a88093284f591278f0659a2ff883c364b6536382fcfbf
    .dll windows x86


    Headers

    Sections

  • ed2529f938ef280b5e8adb171dd460212f777a19b1ac9d650ee81c4900c0bc78
    .dll windows x86


    Headers

    Sections

  • ee57fb61953bce1b400f8de464b1d1bac5a7ed2657d64c03a51ab498f2cd19a3
    .dll regsvr32 windows x86

    2f7d1706341a4c1a58fd983f48b245ef


    Headers

    Imports

    Exports

    Sections

  • f84e36b4f2030ca6ecb037a85a35d56a324426ecf08b85c9c5cd3587ba3a6742
    .dll regsvr32 windows x86

    f1c2f5370d0009f10adb6d65fdcaaa38


    Headers

    Imports

    Exports

    Sections