b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7[.]zip

General

Target
b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.zip
Size 185KB
Sample240402-mevs1afc58
SHA256 7fb9b8eb401dd64ade14f83845649374bf06c641014e13271948f5bb3d130eb5
MD5 5bf9c7470f92b8fe5034df6d2c1b4c97
SHA1 ed644d49677878771e5d8aab813d9a1685eb0061
SHA512 591baa42d5996db51f37a0a0e98e125f6be27e1ec74cb4cf2625b71292cddbb670686a3b96f9d1a1998da3acaf846262451ce0df796bb9e46dca57476d1e0dd2
SSDEEP 3072:1pha3yZL3BsOvjtmPQXm4MSLLTCCcM80AaVaZvRIkPy1ezySnpg44VCwWQ6lOQ:1hZL3BPbtY4MOTyvyeRICNz7pgtPbQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.exe

File Explorer

b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.zip

.zip 185KB
b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.exe

.exe 333KB

b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.zip

SHA256 7fb9b8eb401dd64ade14f83845649374bf06c641014e13271948f5bb3d130eb5
MD5 5bf9c7470f92b8fe5034df6d2c1b4c97
SHA1 ed644d49677878771e5d8aab813d9a1685eb0061
SHA512 591baa42d5996db51f37a0a0e98e125f6be27e1ec74cb4cf2625b71292cddbb670686a3b96f9d1a1998da3acaf846262451ce0df796bb9e46dca57476d1e0dd2
SSDEEP 3072:1pha3yZL3BsOvjtmPQXm4MSLLTCCcM80AaVaZvRIkPy1ezySnpg44VCwWQ6lOQ:1hZL3BPbtY4MOTyvyeRICNz7pgtPbQ
MD5 SHA1 SHA512 SSDEEP

Password

infected

b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.exe

IMPHASH 5a21299c9e523d932e96c629a301a84f
SHA256 b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7
MD5 ad6b08e137914d35aa22d05a0079e081
SHA1 011e041e6b08d16e64cd42521ad5334ad40fb9b1
SHA512 714942846cb36bb9c5ec155defabee7e044fc667e450c9ae45bac317318cf7fd5e578ee298883e3492ba254b0390a67f1b0473c7f6158dd93a338dac8525702f
SSDEEP 3072:L0XldAwWvDl/VF31+uoiXf8HVDYjjEQayL1ww3pUweEKLVamTsTwXULfpTRZfFHg:LcduFHfcYIs1D3BeBaGsTrLhTRZfF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

1

Major OS version

5

Entry point

16807

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wizusoz-dazamozo.pdb

kernel32

InterlockedIncrement SetConsoleTextAttribute ReadConsoleA GetCurrentProcess CreateDirectoryW GetFileAttributesExA GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GlobalAlloc GetVolumeInformationA GetFirmwareEnvironmentVariableA TerminateThread GetLocaleInfoW GetSystemPowerStatus GetConsoleAliasExesLengthW GetVersionExW FindNextVolumeW GetConsoleAliasW GetModuleFileNameW CreateFileW FindResourceA GetLastError GetCurrentDirectoryW GetProcAddress PeekConsoleInputW RemoveDirectoryA LoadLibraryA WriteConsoleA FindFirstVolumeMountPointW GetNumberFormatW QueryDosDeviceW GlobalFindAtomW VirtualProtect _lopen GetCurrentProcessId ResetWriteWatch AreFileApisANSI OutputDebugStringW HeapReAlloc WriteConsoleW SetStdHandle LCMapStringW GetHandleInformation GetEnvironmentVariableW MultiByteToWideChar EncodePointer DecodePointer ReadFile ExitProcess GetModuleHandleExW WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize HeapFree IsDebuggerPresent SetFilePointerEx GetStdHandle GetFileType GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW HeapAlloc GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW CloseHandle

user32

CharUpperBuffW ChangeMenuA CharLowerBuffA DrawAnimatedRects

advapi32

ReadEventLogA

Sharing