MecchaMimiCry.zip
- SHA256 17b0f292c4d17fbc54711acfb1034e457d713af5d025a2ea73ae7f2522b0ae00
Password
2026
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MecchaRetail.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
MecchaRetail.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
16 signatures
150 seconds
General
- Target MecchaMimiCry.zip
- Size 10.4MB
- Sample260703-ymebrsfv21
- SHA256 17b0f292c4d17fbc54711acfb1034e457d713af5d025a2ea73ae7f2522b0ae00
- MD5 4661663025875c2133c98d0e21dfd46e
- SHA1 5c9c70908b64b8fa6322443589bbdc70d80ab9ae
- SHA512 dc359dfbe3f8195e1dc96c6819923e64d0da4b395a379edd605333fc962ac1b091a8aec57921f37adc28e3c63d9e1e632067547e0c1abee2fbc828a014989c96
- SSDEEP 196608:I6N07OUzNGys1U+PQsgsIPjDcOTKyUF+ocQLPOJOf0NiIieyqvDgT2LUUazfG6Fw:I6NjUpG5U+Ysg6aaowOJOf0NiIMSDgTm
- TLSH T148B633D3B6C163D11D694CA35E3828600D49BF8E6159BE2854F84FEC27C85E78CD4EB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MecchaRetail.exe
File Explorer
-
MecchaMimiCry.zip.zip 10.4MB
-
MecchaRetail.exe.exe 10.6MB
MecchaRetail.exe
- SHA256 bc163b34de39ac8dd8e6a813d19556da59a25f9e3ab2d4ab2ee2c9cb7d8e35d0
- MD5 035d48ff86f071e61b861a957a4a2ae9
- SHA1 dfd5c43464370bb407ea3e81659ec87b4df66b3b
- SHA512 0fb13511fb20e8d06abe771b148640c72b0544517d13afc3d281aaf96ce49389f5a96f59e7d4aba1cb77ae70e80b3860499516cc74f9d66dc0b5a87059b6544d
- SSDEEP 196608:2Dqn6BAmciPyrZM3kPQMmQIQwzAJTXGwkQluxZvXnSu4:2Dq6XL6VMkIR98pfluPnSu4
- TLSH T1F3B6330E33E8DE95D42B15B236B9306E59F0EE109090BF9C10F2CEE3575A59E6E952CC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2026
Minor OS version
0
Major OS version
6
Entry point
17277016
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
Size
548KB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
154KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
8KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
26KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.text
Size
192KB
Virtual Size
192KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.text
Size
Virtual Size
14.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
9.7MB
Virtual Size
9.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
generic
count=210, id=261, version=33145,
count=18, id=260, version=33145,
count=8, id=259, version=33145,
count=7, id=253, version=35721,
count=10, id=259, version=35721,
count=19, id=260, version=35721,
count=105, id=261, version=35721,
count=43, id=260, version=33523,
count=129, id=260, version=32535,
count=5, id=261, version=36246,
count=32, id=257, version=33145,
count=3, id=123, version=2207,
count=336, id=1, productName=Unmarked objects,
count=10, id=265, version=36248,
count=1, id=255, version=36248,
count=1, id=151,
count=1, id=258, version=36248,