7z2603-x64[.]exe | Triage™

General

Target
7z2603-x64.exe
Size 1.6MB
Sample260910-whq4nawte1
SHA256 0859c524b8a63551848f0c246abddcb1d0b7b656b0fbfe879f8d85e61a9e6edd
MD5 ece29f11bca82d84b4f06a0b73f127dc
SHA1 9eff75f1f9c2786a1807a220f3cd0f5279b45f5d
SHA512 50025bab628b69f8eb35a590900093814e540ce7ffef8c676a1198e2d2a3f1dcdc44f04f92c28ca89bf6ee869fad3710786e14073c7db36281e8f7a4c495ea7f
SSDEEP 24576:XUZY27AIDG+y6ln0ofg1iPQYudr10Vpx4H7o4MtZhEZzmaUbqAjmo5vW3AQbrx:XUu27AAFifiPo6U3MZkijmo5vW3AQbrx
TLSH
T117753365E36A9E9EE8AFD0B7CE3D02A3F2B2BC5C841DAF4F04C24A90DD7D255D014661
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7z2603-x64.exe

File Explorer

7z2603-x64.exe

.exe 1.6MB

7z2603-x64.exe

IMPHASH d00af420812a39241f821fb057cc3154
SHA256 0859c524b8a63551848f0c246abddcb1d0b7b656b0fbfe879f8d85e61a9e6edd
MD5 ece29f11bca82d84b4f06a0b73f127dc
SHA1 9eff75f1f9c2786a1807a220f3cd0f5279b45f5d
SHA512 50025bab628b69f8eb35a590900093814e540ce7ffef8c676a1198e2d2a3f1dcdc44f04f92c28ca89bf6ee869fad3710786e14073c7db36281e8f7a4c495ea7f
SSDEEP 24576:XUZY27AIDG+y6ln0ofg1iPQYudr10Vpx4H7o4MtZhEZzmaUbqAjmo5vW3AQbrx:XUu27AAFifiPo6U3MZkijmo5vW3AQbrx
TLSH
T117753365E36A9E9EE8AFD0B7CE3D02A3F2B2BC5C841DAF4F04C24A90DD7D255D014661
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

34352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ole32

CoInitialize CoCreateInstance

user32

MessageBoxW DestroyWindow ShowWindow SetWindowTextW EnableWindow GetDlgItem SetDlgItemTextW GetDlgItemTextW ExitWindowsEx PeekMessageW DispatchMessageW TranslateMessage IsDialogMessageW GetMessageW LoadIconW CreateDialogParamW SendMessageW

advapi32

LookupPrivilegeValueW AdjustTokenPrivileges RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegCloseKey RegQueryValueExW OpenProcessToken

shell32

SHGetFolderPathW SHGetPathFromIDListW SHBrowseForFolderW

msvcrt

memcpy _c_exit __C_specific_handler free malloc memmove memcmp exit __set_app_type _fmode _commode __setusermatherr _initterm __getmainargs _acmdln _cexit memset _exit _XcptFilter

kernel32

CloseHandle CreateFileW GetCommandLineW GetModuleFileNameW ReadFile SetFileTime MoveFileExW GetCurrentProcess FormatMessageW LocalFree DeleteFileW WriteFile SetFilePointer GetModuleHandleW LoadLibraryExW GetStartupInfoA SetFileAttributesW GetFileAttributesW CreateDirectoryW GetLastError GetSystemDirectoryW lstrcpyW LoadLibraryW GetProcAddress lstrcatW lstrlenW GetVersion

Resubmissions

Sharing