infaz (1).zip
- SHA256 9d08241a03521bde34f15fec177e389b916dbf536e3b9f4b6af08d6de7ce907a
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
infaz.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
infaz.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
16 signatures
150 seconds
General
- Target infaz (1).zip
- Size 798KB
- Sample261101-wyncpsxvav
- SHA256 9d08241a03521bde34f15fec177e389b916dbf536e3b9f4b6af08d6de7ce907a
- MD5 9f17356bba7ed3949115ecc728c1323c
- SHA1 d25ebe953fadc22f101316858b8630f7f3f56301
- SHA512 00a460ca6009a4000afc0f2d04bcca19622c16e4978a49be9adfc4af930a1a604e3b9442aed97d28a65500cb3e531ca709a55bc6e0287f262e05f5c885b36e2d
- SSDEEP 12288:hq6gWyrYTCq1HphQsc+aY5C+2vqnsH0m7ZpZoTxB373RTm0++RYki1tQqRhtQf:QO6q1H3bczY9OpClnmb+RYziqztQf
- TLSH T11F0523C1C3499D13BEEDB8381B7453083BBB6EFF132C6A5775A15F16189C307A698688
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/infaz.exe
File Explorer
-
infaz (1).zip.zip 798KB
-
infaz.exe.exe 1.4MB
infaz.exe
- IMPHASH e6b5d2741b6f1121ad95fbd78c554da1
- SHA256 593419cbf9ed368d3cdf6b39306a477a7f67c0ead1ad04dc9d83c3ce1539bbb7
- MD5 6998906342bab703f224f7df8dcd17c0
- SHA1 6c9fad17821d2f0ce959e3c911f57292df226141
- SHA512 712abb2146050bac9f197dc46a0efbd1c26e4efe7f4c1faac42c9e851aef2a8b43ea08b9a9d78b89e255ea0c5f3bad1204fd334e2b3cd073ef72de3cc18e0cda
- SSDEEP 24576:7Tif6hysWbIkDWYOJf82frKnHnNnjbNYYLIx5UPv:PiShysWbIkDWYOR822HrY
- TLSH T1BB659D0BA3B900EDD167D279C9065607EFB2B4051324ABDB5790CA662F23FE15F7A321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
998528
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
RegisterClassW
CreateWindowExW
DispatchMessageW
DefWindowProcW
ShowWindow
SetWindowPos
GetKeyState
GetAsyncKeyState
GetSystemMetrics
DrawTextW
SetForegroundWindow
GetMessageW
GetDC
ReleaseDC
BeginPaint
LoadCursorW
CallNextHookEx
SetWindowsHookExW
FindWindowW
FillRect
GetClientRect
EndPaint
wininet
InternetCrackUrlW
InternetOpenW
InternetConnectW
InternetOpenUrlW
InternetReadFile
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetCloseHandle
shell32
ShellExecuteExW
SHGetFolderPathW
ShellExecuteW
advapi32
CheckTokenMembership
RegSetValueExW
RegOpenKeyExW
RegCloseKey
FreeSid
AllocateAndInitializeSid
gdi32
CreateDIBSection
SetTextColor
SetStretchBltMode
StretchBlt
SetBkMode
SelectObject
GetStockObject
GetDIBits
DeleteObject
DeleteDC
CreateSolidBrush
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
crypt32
CryptUnprotectData
mf
MFEnumDeviceSources
mfplat
MFStartup
MFShutdown
MFCreateAttributes
MFCreateMediaType
mfreadwrite
MFCreateSourceReaderFromMediaSource
ole32
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
kernel32
LoadLibraryExW
VirtualProtect
CreateProcessW
GetExitCodeProcess
GetCommandLineA
UnhandledExceptionFilter
RtlVirtualUnwind
GetStdHandle
GetCurrentProcess
IsProcessorFeaturePresent
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
WriteConsoleW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
GetTimeZoneInformation
IsValidCodePage
GetACP
RtlCaptureContext
GetOEMCP
FormatMessageW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetLastError
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
DeleteFileW
GetDriveTypeW
GetLogicalDriveStringsW
GetTempPathW
IsDebuggerPresent
CloseHandle
Sleep
ExitProcess
TerminateProcess
CreateThread
OpenProcess
GetTickCount
GetTickCount64
GetModuleFileNameW
GetModuleHandleW
LoadResource
LockResource
SizeofResource
FindResourceW
LocalFree
MultiByteToWideChar
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FlushFileBuffers
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
GetSystemTimeAsFileTime
FreeLibrary
GetProcessHeap
GetCurrentProcessId
LockFileEx
SetFilePointerEx
GetProcAddress
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
HeapReAlloc
WaitForSingleObjectEx
FlushViewOfFile
GetFileAttributesExW
GetLastError
RtlUnwind
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
UnlockFileEx
SetEndOfFile
OutputDebugStringA
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
GetFileSizeEx
ReadFile
AreFileApisANSI
RaiseException
GetOverlappedResult
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
FormatMessageA
GetLocaleInfoEx
GetExitCodeThread
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
CreateFile2
GetFileInformationByHandleEx
InitializeCriticalSectionEx
WakeAllConditionVariable
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
SetUnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
193KB
Virtual Size
192KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=260, version=33145,
count=8, id=259, version=33145,
count=10, id=259, version=35721,
count=17, id=260, version=35721,
count=89, id=261, version=35721,
count=23, id=257, version=33145,
count=235, id=1, productName=Unmarked objects,
count=189, id=261, version=33145,
count=1, id=260, version=36260,
count=1, id=261, version=36260,
count=1, id=255, version=36260,
count=1, id=258, version=36260,