12_hlc10[.]zip | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
12_hlc10.zip
Size 1.2MB
Sample260730-bk5plswflb
SHA256 fecb14d1977168de1625d7a43eb9c6c6fe8d373477f88d3390534b280c34a757
MD5 8a441e8ff649de8da0cf4eb8107d22a7
SHA1 a0ac0137f5cd65c3e7830dcb9a5c6dc3efcfdc44
SHA512 d6f8362323fdc95933e97d5d1a9c480ff16e81365bb3fc83922cf01c70a7558dc635b01ccd6965d79bdf4edfba4fb5967789b223a24a692fb5d3680574f1751d
SSDEEP 24576:yZbdEvAO7wuRuXU9o6Enbj9occ6v2oFqlB5q24DRLplK/t/4x0/k2OQxgsX5S:yZbdtO75RuE9ohn9ojoqlO2WLplMI+6h
TLSH
T1DB45337B2B5F4C931587330F82B3C2314B9ADD9B141EAFF28C6453009BAE9A9C69D15D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/hlc10.exe

File Explorer

12_hlc10.zip

.zip 1.2MB
hlc10.exe

.exe 1.2MB

12_hlc10.zip

SHA256 fecb14d1977168de1625d7a43eb9c6c6fe8d373477f88d3390534b280c34a757
MD5 8a441e8ff649de8da0cf4eb8107d22a7
SHA1 a0ac0137f5cd65c3e7830dcb9a5c6dc3efcfdc44
SHA512 d6f8362323fdc95933e97d5d1a9c480ff16e81365bb3fc83922cf01c70a7558dc635b01ccd6965d79bdf4edfba4fb5967789b223a24a692fb5d3680574f1751d
SSDEEP 24576:yZbdEvAO7wuRuXU9o6Enbj9occ6v2oFqlB5q24DRLplK/t/4x0/k2OQxgsX5S:yZbdtO75RuE9ohn9ojoqlO2WLplMI+6h
TLSH
T1DB45337B2B5F4C931587330F82B3C2314B9ADD9B141EAFF28C6453009BAE9A9C69D15D
MD5 SHA1 SHA512 SSDEEP TLSH

hlc10.exe

SHA256 4e1c48b9b8ed2d81e267d0a5a6a4f9a150c79abc30d9b21c42433406f2aa2d24
MD5 119c347aaf83734cdf97acca3703b8c1
SHA1 08e3a2be22979860b664b9e05db777ffa08584ce
SHA512 ce828f57ac347e4fa317d5d3d1f124dadc3b07f4f73566c1308e253f93c7618acfa11d0fa70fe8ae5cfb9ec36eafcf519b115bbf8667b260b1cd06c1a845d2df
SSDEEP 24576:4NwAuOBwuRkhUrQsEnvR9YkE6vGoFEllf6A4DhLFzKJR/4Pwvk+OQRsXOV:4SJOBnRk6rQ7p9YP6El0AsLFzMccc2sy
TLSH
T1F945337777964C73C543373A1963A232872BFA87150BDBE388EC5E04EFAA6A1641C185
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

59456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

54KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

7KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

12_hlc10.zip

hlc10.exe

generic