7z2601-x64[.]exe | Triage™

General

Target
7z2601-x64.exe
Size 1.6MB
Sample260528-aky2dsdx8w
SHA256 d64a0468f5b5b0b0fc5b2188450bcd655b70809d97b1c4535f2884635094377d
MD5 bed0747071a866109d26eced6c7751e0
SHA1 625e395ad8bd099a311c72e0d8e65d1c3bd6628a
SHA512 e52d5050c8fe4c0a09bd482d36eb1377cf342c4739060d94094c4acb5aab1e53fa3842f64dec7b5df3b3bdc7394a8bc9a9cd7a88808342c1136dd9ce9fe5a0a2
SSDEEP 49152:4VX0/V4ZUBGxZ+wfHXf6JIOGZKU5sc+ug2ksehzmh1TDR:4VXCVQlxkwfHXf6JIOGMc+ugswzmbTDR
TLSH
T135753353F3AC22B6C1D29638CE14534ADBDB78BC47A1DA1E10C29C211E93690FDE5776
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7z2601-x64.exe

File Explorer

7z2601-x64.exe

.exe 1.6MB

7z2601-x64.exe

IMPHASH d00af420812a39241f821fb057cc3154
SHA256 d64a0468f5b5b0b0fc5b2188450bcd655b70809d97b1c4535f2884635094377d
MD5 bed0747071a866109d26eced6c7751e0
SHA1 625e395ad8bd099a311c72e0d8e65d1c3bd6628a
SHA512 e52d5050c8fe4c0a09bd482d36eb1377cf342c4739060d94094c4acb5aab1e53fa3842f64dec7b5df3b3bdc7394a8bc9a9cd7a88808342c1136dd9ce9fe5a0a2
SSDEEP 49152:4VX0/V4ZUBGxZ+wfHXf6JIOGZKU5sc+ug2ksehzmh1TDR:4VXCVQlxkwfHXf6JIOGMc+ugswzmbTDR
TLSH
T135753353F3AC22B6C1D29638CE14534ADBDB78BC47A1DA1E10C29C211E93690FDE5776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

34832

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ole32

CoInitialize CoCreateInstance

user32

MessageBoxW DestroyWindow ShowWindow SetWindowTextW EnableWindow GetDlgItem SetDlgItemTextW GetDlgItemTextW ExitWindowsEx PeekMessageW DispatchMessageW TranslateMessage IsDialogMessageW GetMessageW LoadIconW CreateDialogParamW SendMessageW

advapi32

LookupPrivilegeValueW AdjustTokenPrivileges RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegCloseKey RegQueryValueExW OpenProcessToken

shell32

SHGetFolderPathW SHGetPathFromIDListW SHBrowseForFolderW

msvcrt

memcpy _c_exit __C_specific_handler free malloc memmove memcmp exit __set_app_type _fmode _commode __setusermatherr _initterm __getmainargs _acmdln _cexit memset _exit _XcptFilter

kernel32

CloseHandle CreateFileW GetCommandLineW GetModuleFileNameW ReadFile SetFileTime MoveFileExW GetCurrentProcess FormatMessageW LocalFree DeleteFileW WriteFile SetFilePointer GetModuleHandleW LoadLibraryExW GetStartupInfoA SetFileAttributesW GetFileAttributesW CreateDirectoryW GetLastError GetSystemDirectoryW lstrcpyW LoadLibraryW GetProcAddress lstrcatW lstrlenW GetVersion

Sharing