7z2602-x64[.]exe | Triage™

General

Target
7z2602-x64.exe
Size 1.6MB
Sample260808-1elf8ayyft
SHA256 6745fa76dc2ea031596d8678f6f6b99c3c1b435b4164a63485adbbc7b8d82ef0
MD5 0617e5373e5e311fcb4bee506e046359
SHA1 b563e139acab81cc7ddf358bec6cee1e6b8b2b17
SHA512 85389eaef377aa9fef3155d2e3375c1fff77fc10e39d9312cab229f202f3aff78f6e807460cf6b04bc2a32f72f7853afbf475cf0dce6232a40c0a6f8ddcbe4da
SSDEEP 49152:L6Cx0Yr+pwKQtSzhTnSwIC4xQlMIUoks8KkE3XB1:L6ChSwbm4wIvxQlPkN76XB1
TLSH
T10D753302D1A0817DCDCBC871D6EC9E23E132B10DDB605E6BD266CCCEBA21A119EDDD59
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7z2602-x64.exe

File Explorer

7z2602-x64.exe

.exe 1.6MB

7z2602-x64.exe

IMPHASH d00af420812a39241f821fb057cc3154
SHA256 6745fa76dc2ea031596d8678f6f6b99c3c1b435b4164a63485adbbc7b8d82ef0
MD5 0617e5373e5e311fcb4bee506e046359
SHA1 b563e139acab81cc7ddf358bec6cee1e6b8b2b17
SHA512 85389eaef377aa9fef3155d2e3375c1fff77fc10e39d9312cab229f202f3aff78f6e807460cf6b04bc2a32f72f7853afbf475cf0dce6232a40c0a6f8ddcbe4da
SSDEEP 49152:L6Cx0Yr+pwKQtSzhTnSwIC4xQlMIUoks8KkE3XB1:L6ChSwbm4wIvxQlPkN76XB1
TLSH
T10D753302D1A0817DCDCBC871D6EC9E23E132B10DDB605E6BD266CCCEBA21A119EDDD59
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

34352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ole32

CoInitialize CoCreateInstance

user32

MessageBoxW DestroyWindow ShowWindow SetWindowTextW EnableWindow GetDlgItem SetDlgItemTextW GetDlgItemTextW ExitWindowsEx PeekMessageW DispatchMessageW TranslateMessage IsDialogMessageW GetMessageW LoadIconW CreateDialogParamW SendMessageW

advapi32

LookupPrivilegeValueW AdjustTokenPrivileges RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegCloseKey RegQueryValueExW OpenProcessToken

shell32

SHGetFolderPathW SHGetPathFromIDListW SHBrowseForFolderW

msvcrt

memcpy _c_exit __C_specific_handler free malloc memmove memcmp exit __set_app_type _fmode _commode __setusermatherr _initterm __getmainargs _acmdln _cexit memset _exit _XcptFilter

kernel32

CloseHandle CreateFileW GetCommandLineW GetModuleFileNameW ReadFile SetFileTime MoveFileExW GetCurrentProcess FormatMessageW LocalFree DeleteFileW WriteFile SetFilePointer GetModuleHandleW LoadLibraryExW GetStartupInfoA SetFileAttributesW GetFileAttributesW CreateDirectoryW GetLastError GetSystemDirectoryW lstrcpyW LoadLibraryW GetProcAddress lstrcatW lstrlenW GetVersion

Sharing