b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7[.]zip

General

Target
b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.zip
Size 185KB
Sample240402-msnlvafe71
SHA256 24e8f7995fad42276057ef8883912aaff8ccbc4189dd0aad97eecc3d30069ac0
MD5 79de4275cdba5be70d65d1d0c2449b01
SHA1 eead69fe299454d2ca626e6229616d456adc91d7
SHA512 27ccf76ea22d1c5b0cc4aef8c951952f25a8bbe9059940cb822987ee835561ddf48e2de7f9db10b1e8081fde3ec50761b269cc07f8ed4b3ff1726dbbb92219c6
SSDEEP 3072:Ak9/5zsMHQIfCz3lLuG5z/dy9KSIjp+85sXUmRsDFjUHgsXYNizT/wnqP/NgOe:A85zsMwd1jz/gJ8a2tUH2NiXwqPBe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.exe

File Explorer

b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.zip

.zip 185KB
b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.exe

.exe 333KB

b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.zip

SHA256 24e8f7995fad42276057ef8883912aaff8ccbc4189dd0aad97eecc3d30069ac0
MD5 79de4275cdba5be70d65d1d0c2449b01
SHA1 eead69fe299454d2ca626e6229616d456adc91d7
SHA512 27ccf76ea22d1c5b0cc4aef8c951952f25a8bbe9059940cb822987ee835561ddf48e2de7f9db10b1e8081fde3ec50761b269cc07f8ed4b3ff1726dbbb92219c6
SSDEEP 3072:Ak9/5zsMHQIfCz3lLuG5z/dy9KSIjp+85sXUmRsDFjUHgsXYNizT/wnqP/NgOe:A85zsMwd1jz/gJ8a2tUH2NiXwqPBe
MD5 SHA1 SHA512 SSDEEP

Password

infected

b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7.exe

IMPHASH 5a21299c9e523d932e96c629a301a84f
SHA256 b30369cdc0a8cda16ba0703777a423f601885ce02ec151349892b56d0e769fe7
MD5 ad6b08e137914d35aa22d05a0079e081
SHA1 011e041e6b08d16e64cd42521ad5334ad40fb9b1
SHA512 714942846cb36bb9c5ec155defabee7e044fc667e450c9ae45bac317318cf7fd5e578ee298883e3492ba254b0390a67f1b0473c7f6158dd93a338dac8525702f
SSDEEP 3072:L0XldAwWvDl/VF31+uoiXf8HVDYjjEQayL1ww3pUweEKLVamTsTwXULfpTRZfFHg:LcduFHfcYIs1D3BeBaGsTrLhTRZfF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

1

Major OS version

5

Entry point

16807

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wizusoz-dazamozo.pdb

kernel32

InterlockedIncrement SetConsoleTextAttribute ReadConsoleA GetCurrentProcess CreateDirectoryW GetFileAttributesExA GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GlobalAlloc GetVolumeInformationA GetFirmwareEnvironmentVariableA TerminateThread GetLocaleInfoW GetSystemPowerStatus GetConsoleAliasExesLengthW GetVersionExW FindNextVolumeW GetConsoleAliasW GetModuleFileNameW CreateFileW FindResourceA GetLastError GetCurrentDirectoryW GetProcAddress PeekConsoleInputW RemoveDirectoryA LoadLibraryA WriteConsoleA FindFirstVolumeMountPointW GetNumberFormatW QueryDosDeviceW GlobalFindAtomW VirtualProtect _lopen GetCurrentProcessId ResetWriteWatch AreFileApisANSI OutputDebugStringW HeapReAlloc WriteConsoleW SetStdHandle LCMapStringW GetHandleInformation GetEnvironmentVariableW MultiByteToWideChar EncodePointer DecodePointer ReadFile ExitProcess GetModuleHandleExW WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize HeapFree IsDebuggerPresent SetFilePointerEx GetStdHandle GetFileType GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW HeapAlloc GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW CloseHandle

user32

CharUpperBuffW ChangeMenuA CharLowerBuffA DrawAnimatedRects

advapi32

ReadEventLogA

Sharing