240308-fm7zzagf7x_pw_infected[.]zip

General

Target
240308-fm7zzagf7x_pw_infected.zip
Size 93KB
Sample240605-ltxepscc8y
SHA256 5873d883f5af9c1e0d3acb4db5bbc609ea6283156cf9429dd4077c44916b12fa
MD5 0a35e2e6f80f85c25b68836ceb25acd1
SHA1 715c9d44fa9f76d82348627199f36df195e213d0
SHA512 db9f01997fe4ded70e6ac194171824e70e162d6d96d861c9549a7a0bc8ad6a187942f3a67aa7f57d3fe114a9940feb80475dec2f4c55b2f27c8cfbbddbaad2bf
SSDEEP 1536:q1wFdtMW1QNrEWzmBvEiwaxpWnKXy/HskVClIH3oU6e2Ky71Iuu1TQ2lR2Zc5e7p:q1uaAQOAmmyyKi/HssCIL27TyxRWc5Cp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a2c996efff932151e3d97d6c0816cc4ad58e54068bc1b037ce2d279a55521008

File Explorer

240308-fm7zzagf7x_pw_infected.zip

.zip 93KB
a2c996efff932151e3d97d6c0816cc4ad58e54068bc1b037ce2d279a55521008

.exe 161KB

240308-fm7zzagf7x_pw_infected.zip

SHA256 5873d883f5af9c1e0d3acb4db5bbc609ea6283156cf9429dd4077c44916b12fa
MD5 0a35e2e6f80f85c25b68836ceb25acd1
SHA1 715c9d44fa9f76d82348627199f36df195e213d0
SHA512 db9f01997fe4ded70e6ac194171824e70e162d6d96d861c9549a7a0bc8ad6a187942f3a67aa7f57d3fe114a9940feb80475dec2f4c55b2f27c8cfbbddbaad2bf
SSDEEP 1536:q1wFdtMW1QNrEWzmBvEiwaxpWnKXy/HskVClIH3oU6e2Ky71Iuu1TQ2lR2Zc5e7p:q1uaAQOAmmyyKi/HssCIL27TyxRWc5Cp
MD5 SHA1 SHA512 SSDEEP

Password

infected

a2c996efff932151e3d97d6c0816cc4ad58e54068bc1b037ce2d279a55521008

IMPHASH 21c56590b26469b5e44c6820863a1cdf
SHA256 a2c996efff932151e3d97d6c0816cc4ad58e54068bc1b037ce2d279a55521008
MD5 beb935e79a4a35da55548d745c312586
SHA1 404f3832c8e13dc1bbcbac9eda9cf8bea9b07d84
SHA512 c514adbff0dfeeaaeca607a3efdefb1e71c76db2ae3293d1e465be5f175051f852c8b8ffd58de11ea2e8128bf1e612c5409616b92f92362f515c806e562027f9
SSDEEP 3072:rCZrijHsHF5PcguVl5AtC+U+OdxVH7pM:rariDsrd0lF7xxW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4958

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA WriteConsoleOutputCharacterA SystemTimeToTzSpecificLocalTime GlobalAddAtomA MoveFileExW ZombifyActCtx CreateJobObjectW GetUserDefaultLCID WideCharToMultiByte LocalShrink GetLocaleInfoW FatalAppExitW GetFileAttributesA HeapCreate GetModuleFileNameW ReleaseSemaphore ReplaceFileA GetStdHandle SetLastError CreateNamedPipeA BuildCommDCBW LoadLibraryA UnhandledExceptionFilter InterlockedExchangeAdd LocalAlloc GetFileType AddAtomW lstrcatW CancelTimerQueueTimer VirtualProtect GetCurrentDirectoryA FileTimeToLocalFileTime CreateFileW SetStdHandle HeapAlloc GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer GetProcAddress GetModuleHandleW ExitProcess WriteFile EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryW Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind IsProcessorFeaturePresent HeapSize HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer CloseHandle WriteConsoleW

user32

LoadIconA GetClassLongW SetKeyboardState

Sharing