zgent63392010[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
zgent63392010.exe
Size 76.4MB
Sample260613-nmqppafs3x
SHA256 542ed599e59e79c0cc6d6add506b993f00b0bd818bc4d4efb86cf0a4d32a4417
MD5 16415a64ab44a25855ef2d392e00f99b
SHA1 ebcde2411fbf4900b5c8a0a0a24e4c3526dbb168
SHA512 90914193f313f41f795b8025477c01fffaf4de5c0d4fe69a2dda4a7504cfda1140260e0d6308c8c0019fa969969c9781ec2189cbe58af1052ed02814503d4034
SSDEEP 196608:OXist7QZseYzNT+U/wQnkSTD3t/76qTImCbfdxABI:o7tHkUz3vt/7F4SBI
TLSH
T19408074AFB41CE92F9029531E46697A06372DC329A61C713329A3F1A7F7F3A48DF1494
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
zgent63392010.exe

File Explorer

zgent63392010.exe

.exe 76.4MB

zgent63392010.exe

IMPHASH a5396d0e3a0b90f35cda230c0314ce27
SHA256 542ed599e59e79c0cc6d6add506b993f00b0bd818bc4d4efb86cf0a4d32a4417
MD5 16415a64ab44a25855ef2d392e00f99b
SHA1 ebcde2411fbf4900b5c8a0a0a24e4c3526dbb168
SHA512 90914193f313f41f795b8025477c01fffaf4de5c0d4fe69a2dda4a7504cfda1140260e0d6308c8c0019fa969969c9781ec2189cbe58af1052ed02814503d4034
SSDEEP 196608:OXist7QZseYzNT+U/wQnkSTD3t/76qTImCbfdxABI:o7tHkUz3vt/7F4SBI
TLSH
T19408074AFB41CE92F9029531E46697A06372DC329A61C713329A3F1A7F7F3A48DF1494
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

160072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetFileType HeapFree HeapAlloc GetSystemTimeAsFileTime RtlUnwindEx RaiseException RtlPcToFileHeader HeapReAlloc HeapSize HeapQueryInformation ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree FlsAlloc HeapSetInformation HeapCreate QueryPerformanceCounter GetTickCount SetStdHandle GetConsoleCP GetConsoleMode GetProcessHeap GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetCurrentProcess SetEndOfFile FlushFileBuffers lstrlenA lstrcmpA GlobalFlags FormatMessageW GetCurrentProcessId GlobalFree LocalReAlloc TlsSetValue GlobalAlloc GlobalHandle GlobalReAlloc TlsAlloc TlsGetValue LocalFree LocalAlloc GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom LoadLibraryW LoadLibraryA lstrcmpW GetVersionExA GlobalLock GlobalUnlock WideCharToMultiByte FreeLibrary FindResourceW LoadResource LockResource SizeofResource SetLastError SetErrorMode GetModuleHandleW GetProcAddress GetModuleFileNameW lstrlenW SetFilePointer SetFileAttributesA ReadFile GetFileSize DeleteFileW CopyFileW CreateThread ReleaseMutex DeleteCriticalSection OpenEventW CreateToolhelp32Snapshot OpenFileMappingW Process32NextW CreateEventW CreateFileMappingW ResetEvent EnterCriticalSection GetLastError LeaveCriticalSection Sleep InitializeCriticalSection SetEvent WaitForSingleObject UnmapViewOfFile MapViewOfFile CreateMutexW CloseHandle MultiByteToWideChar CreateFileW WriteFile VirtualAlloc CreateFileA

user32

LoadCursorW GetSysColorBrush PostQuitMessage DestroyMenu SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW EnableMenuItem CheckMenuItem SetWindowTextW GetMenuState GetWindowThreadProcessId IsWindowEnabled RegisterWindowMessageW LoadIconW WinHelpW GetCapture SetWindowsHookExW CallNextHookEx GetClassNameW SetPropW GetPropW RemovePropW GetFocus IsWindow GetWindowTextW GetForegroundWindow GetLastActivePopup DispatchMessageW GetDlgItem GetTopWindow DestroyWindow GetWindowLongPtrW SetWindowLongPtrW GetMessageTime GetMessagePos PeekMessageW MapWindowPoints GetKeyState SetMenu EnableWindow UnhookWindowsHookEx TabbedTextOutW DrawTextW SetForegroundWindow GetClientRect PostMessageW GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxW CreateWindowExW GetClassInfoExW GetClassInfoW ValidateRect DrawTextExW GrayStringW ClientToScreen GetDC ReleaseDC GetSysColor GetWindow GetSystemMetrics GetWindowRect GetWindowPlacement IsIconic SystemParametersInfoA SetWindowPos RegisterClassW AdjustWindowRectEx GetParent GetDlgCtrlID SendMessageW DefWindowProcW CallWindowProcW CopyRect PtInRect GetMenu GetWindowLongW GetClassLongPtrW

gdi32

SetViewportOrgEx CreateBitmap GetStockObject GetDeviceCaps DeleteDC ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx SaveDC SelectObject Escape ExtTextOutW TextOutW RectVisible PtVisible DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC OffsetViewportOrgEx

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

shlwapi

PathFindFileNameW PathFindExtensionW