Trojan[.]Bonzify[.]zip

General

Target
Trojan.Bonzify.zip
Size 5.5MB
Sample261106-gjnmlaah86
SHA256 4ca5ce97898d7770d1364e8b9006bef56383f5886b98888dedc7876283e9044a
MD5 2d3efe29a44d0ea6fa3697c135030e1a
SHA1 65d49e73ff1c432e9d95b009298f347de5ed828e
SHA512 1180026727462504c426a0892f3561a5cc75a3d24cf84aca4dcf51f55c0d0245324ed0268a9e961b36acbad124fdfa65944146a5cd098d9c16efbabdb8cd2c4b
SSDEEP 98304:Kuv8hvcPgHmweG9abSwvQCFNeczP73i8muv2jO9mLnHJ9Bo3JHWXpQNLHE+nJ:Ky7Oe2aWcecr7F0O8LnpvsHSSk0J
TLSH
T1B34633A6BD93DF688572D7B75EC0F9740D83370BA567572D8CE58BC27C222C4A250A4C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Bonzify.exe

File Explorer

Trojan.Bonzify.zip

.zip 5.5MB
Bonzify.exe

.exe 6.4MB

Trojan.Bonzify.zip

SHA256 4ca5ce97898d7770d1364e8b9006bef56383f5886b98888dedc7876283e9044a
MD5 2d3efe29a44d0ea6fa3697c135030e1a
SHA1 65d49e73ff1c432e9d95b009298f347de5ed828e
SHA512 1180026727462504c426a0892f3561a5cc75a3d24cf84aca4dcf51f55c0d0245324ed0268a9e961b36acbad124fdfa65944146a5cd098d9c16efbabdb8cd2c4b
SSDEEP 98304:Kuv8hvcPgHmweG9abSwvQCFNeczP73i8muv2jO9mLnHJ9Bo3JHWXpQNLHE+nJ:Ky7Oe2aWcecr7F0O8LnpvsHSSk0J
TLSH
T1B34633A6BD93DF688572D7B75EC0F9740D83370BA567572D8CE58BC27C222C4A250A4C
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Bonzify.exe

IMPHASH 0bee32f8779ce7af7a869e923f1dd6fb
SHA256 66f62408dfce7c4a5718d2759f1d35721ca22077398850277d16e1fca87fe764
MD5 fba93d8d029e85e0cde3759b7903cee2
SHA1 525b1aa549188f4565c75ab69e51f927204ca384
SHA512 7c1441b2e804e925eb5a03e97db620117d3ad4f6981dc020e4e7df4bfc4bd6e414fa3b0ce764481a2cef07eebb2baa87407355bfbe88fab96397d82bd441e6a2
SSDEEP 196608:adAMaWetTeAkLIdx751qFTkub//73lc6u7b5VJ2Yx5xIdk3:OaWedh+Idx75QYub//73lc6u7bLMYxD
TLSH
T1E2661212BB81A810C460D7332D6AE9E16635FF955FA3970E2B1B7A3C2532574E63B313
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Trojan.Bonzify.zip

Bonzify.exe

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

generic

Sharing

General

Malware Config

Signatures

File Explorer

Trojan.Bonzify.zip

Bonzify.exe

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

generic