7z2401-x64[.]exe | Triage™

General

Target
7z2401-x64.exe
Size 1.5MB
Sample240302-tw2q7sfc49
SHA256 17a507cce4066c4be7db53d64d9a9e11dfecfd4f2411393690506e591b5895cd
MD5 de644b4e1086f1315c422f359133543b
SHA1 54be86d121879b0e5d86604297c57a926d665fa8
SHA512 714d41254352d91834a4b648d613e9b4452b93b097b5781ec5bf3ec7c310a489d3a1c409b2f0a6946822b96f6943b579910d26a5f4324b320d485e856dbdcb1a
SSDEEP 49152:8yEuRNRgYQYk6tC0tkaNuiXatTQY7quUncuTVyvn65:8yEoL7tCzlqLcuBz5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7z2401-x64.exe

File Explorer

7z2401-x64.exe

.exe 1.5MB

7z2401-x64.exe

IMPHASH cf0d2de4fd6406302012e0f40060395f
SHA256 17a507cce4066c4be7db53d64d9a9e11dfecfd4f2411393690506e591b5895cd
MD5 de644b4e1086f1315c422f359133543b
SHA1 54be86d121879b0e5d86604297c57a926d665fa8
SHA512 714d41254352d91834a4b648d613e9b4452b93b097b5781ec5bf3ec7c310a489d3a1c409b2f0a6946822b96f6943b579910d26a5f4324b320d485e856dbdcb1a
SSDEEP 49152:8yEuRNRgYQYk6tC0tkaNuiXatTQY7quUncuTVyvn65:8yEoL7tCzlqLcuBz5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

29620

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

CoCreateInstance CoInitialize

user32

PeekMessageW ExitWindowsEx GetDlgItemTextW SetWindowTextW ShowWindow MessageBoxW CreateDialogParamW LoadIconW SendMessageW GetMessageW EnableWindow GetDlgItem IsDialogMessageW TranslateMessage DispatchMessageW SetDlgItemTextW DestroyWindow

advapi32

RegSetValueExW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegQueryValueExW RegOpenKeyExW RegCloseKey RegCreateKeyExW

shell32

SHGetFolderPathW SHBrowseForFolderW SHGetPathFromIDListW

msvcrt

_exit _XcptFilter _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp memcpy memcmp memmove malloc free exit memset

kernel32

ReadFile CloseHandle CreateFileW FormatMessageW WriteFile DeleteFileW CreateDirectoryW GetSystemDirectoryW LoadLibraryW GetModuleFileNameW GetFileAttributesW SetFilePointer GetVersion LoadLibraryExW GetModuleHandleA GetStartupInfoA LocalFree SetFileAttributesW SetFileTime MoveFileExW GetLastError lstrcatW GetCommandLineW lstrcpyW GetModuleHandleW GetProcAddress GetCurrentProcess lstrlenW

Sharing