241018-c1zc7s1hmc_pw_infected[.]zip | Triage

Resubmissions

18/10/2024, 08:14

241018-j5c44aygnj 10

18/10/2024, 08:04

241018-jyg5gawbmg 10

Sharing

Copy URL Twitter E-mail

General

Target

241018-c1zc7s1hmc_pw_infected.zip
Size

1.3MB
MD5

b593867a9515f94e89f2e782d9ce5faa
SHA1

e996c6c2ad644fa5b793dfe905223477998d638b
SHA256

98a8e451614afda697babc598df83de790489c11ab64a3afbea0b1c6a0a6ce19
SHA512

8c50c2a62283069c3bc50813abf132a8b56c4c72a7529c4baa7db8da1f3367591571a081bdba14303caaac2166af71e755c22b56324604cc3467383e020bdfb7
SSDEEP

24576:yoNcNWOKAB62ooUvSnJ2qIZ+B4wuCrKLexpC99hERD7FgIIF:yfNpxBeoUvOJ2qOYh6PEhGJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Hykika.exe

Files

241018-c1zc7s1hmc_pw_infected.zip
.zip

Password: infected
a803ebd6032469034f63297d9dead75712b2e21b95504fd4248698e4b89963cd.img
.iso
Hykika.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ