7z2408[.]exe | Triage™

General

Target
7z2408.exe
Size 1.3MB
Sample240826-s92spasarb
SHA256 faa87251336d864b877a5e6c3e9c9a5e250318be2fdfc8a42ceadb3a956e0405
MD5 d646419d462f0206a3341aef0aa5e3c7
SHA1 eb4b809bbf91804e9bb17be36e9469818601ed91
SHA512 7f6c46c780fcb5fc10cc5405221179ddecbbb871c578ca3d9e3a74141271b383bd83e8f9d75c98d7e9d406e9b935d52a6b04913d654169e0b30f0719225e7dd9
SSDEEP 24576:0AkPEo1y9fcw5K42KmEDCesqTvbdWZWz08ZuEzamDoyhbxGC7eBRak0a7IU9F0:0AJoo24xVWerHkZWAbFWoyhiakn7IU9S
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7z2408.exe

File Explorer

7z2408.exe

.exe 1.3MB

7z2408.exe

IMPHASH ccd0107da0d31bb40a3a4ab7b8173233
SHA256 faa87251336d864b877a5e6c3e9c9a5e250318be2fdfc8a42ceadb3a956e0405
MD5 d646419d462f0206a3341aef0aa5e3c7
SHA1 eb4b809bbf91804e9bb17be36e9469818601ed91
SHA512 7f6c46c780fcb5fc10cc5405221179ddecbbb871c578ca3d9e3a74141271b383bd83e8f9d75c98d7e9d406e9b935d52a6b04913d654169e0b30f0719225e7dd9
SSDEEP 24576:0AkPEo1y9fcw5K42KmEDCesqTvbdWZWz08ZuEzamDoyhbxGC7eBRak0a7IU9F0:0AJoo24xVWerHkZWAbFWoyhiakn7IU9S
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

28996

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

CoCreateInstance CoInitialize

user32

PeekMessageW ExitWindowsEx GetDlgItemTextW SetWindowTextW ShowWindow MessageBoxW CreateDialogParamW LoadIconW SendMessageW GetMessageW EnableWindow GetDlgItem IsDialogMessageW TranslateMessage DispatchMessageW SetDlgItemTextW DestroyWindow

advapi32

RegSetValueExW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegQueryValueExW RegOpenKeyExW RegCloseKey RegCreateKeyExW

shell32

SHGetFolderPathW SHBrowseForFolderW SHGetPathFromIDListW

msvcrt

_exit _XcptFilter _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp memcpy memcmp memmove malloc free exit memset

kernel32

WriteFile ReadFile CloseHandle CreateFileW SetFilePointer LocalFree DeleteFileW CreateDirectoryW GetSystemDirectoryW LoadLibraryW GetProcAddress GetVersion GetModuleHandleW LoadLibraryExW GetModuleHandleA GetStartupInfoA FormatMessageW GetModuleFileNameW GetFileAttributesW SetFileAttributesW SetFileTime GetLastError GetCurrentProcess lstrlenW lstrcatW GetCommandLineW lstrcpyW MoveFileExW

Sharing