Zula Spacex Hack[.]exe | Triage

Sharing

General

Target

Zula Spacex Hack.exe
Size

3.0MB
MD5

9ea8a4ae340433b891d28439c307c3f1
SHA1

f8bb6e9961ccf4c6f0d340a715ec418d777a20b4
SHA256

eb8ac22cb3171099ce9f453185e1c66484a4bddbf612d463365c4bc7c66d73c5
SHA512

7af61339a94a10c9406c99e84df20568e9020e1719e2ab0b903baa1b17f4dbbad61065963ce432a4bec5155347ba606b0e8005e985e842e3b285f68061207c86
SSDEEP

49152:91TOLmD6u8xp/4DU8Kb2N5hFkYQFJPWOcFzU4PjGmfJFwHTcEVBmk1nT9:9tp8xpwMSFkYacVl779FYZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Zula Spacex Hack.exe

Files

Zula Spacex Hack.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ