infaz.zip
- SHA256 3aebd15cae808225662496067fbc15ab5052729ab9d5c6eb41e1070f235e67f1
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
infaz.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
30 signatures
150 seconds
Behavioral task
behavioral2
Sample
infaz.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
23 signatures
150 seconds
General
- Target infaz.zip
- Size 798KB
- Sample261111-gpvm4at12r
- SHA256 3aebd15cae808225662496067fbc15ab5052729ab9d5c6eb41e1070f235e67f1
- MD5 94b026ca5322a039f6aa192b9910ba0b
- SHA1 01a117980afbea930a108c1a4dbc6f5c812914b1
- SHA512 a469de71af834c676610fbfa0bca078dd5cb32588b9d8707e9024151fdf5c06690ef04c48a1f449e964b90ba074540bb31b4aeb24e222e9dfc8c199246eb431f
- SSDEEP 24576:pD8eYiVkiRP5Mo2XHKOq8GZyx91O0B4e2QdE:6EkiRP5MoRpNyE0B3rE
- TLSH T16205333144D956DDE644292626E67E6B6EC04E3F474EFF0252EFC3908202C77A6C8DE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/infaz.exe
File Explorer
-
infaz.zip.zip 798KB
-
infaz.exe.exe 1.4MB
infaz.exe
- IMPHASH e6b5d2741b6f1121ad95fbd78c554da1
- SHA256 77f602ab8567fa108529c14bb357cd997f272347d122fde19dcf950afa97ce78
- MD5 4e9d3527344817072e89f05813a5c0cf
- SHA1 155ab3754c15749bcf694a267bf8155dc59b7e7e
- SHA512 9d824dd508a7611e2ea19d409d3d22409f79b4507b19a12a8d4c60f7a9c36589a0317e7b1f8ba0dff10fb865417347c95167790ab5b9ed68fcc682cf82329a1a
- SSDEEP 24576:1Tif6hysWbIkDWYOJf82frKnHnNnjbNYYLIx5Uvk:RiShysWbIkDWYOR822HrY
- TLSH T1C5659D0BA3B900EDD167D279C9065607EFB2B4051324ABDB5790CA662F23FE15F7A321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
998528
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
RegisterClassW
CreateWindowExW
DispatchMessageW
DefWindowProcW
ShowWindow
SetWindowPos
GetKeyState
GetAsyncKeyState
GetSystemMetrics
DrawTextW
SetForegroundWindow
GetMessageW
GetDC
ReleaseDC
BeginPaint
LoadCursorW
CallNextHookEx
SetWindowsHookExW
FindWindowW
FillRect
GetClientRect
EndPaint
wininet
InternetCrackUrlW
InternetOpenW
InternetConnectW
InternetOpenUrlW
InternetReadFile
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetCloseHandle
shell32
ShellExecuteExW
SHGetFolderPathW
ShellExecuteW
advapi32
CheckTokenMembership
RegSetValueExW
RegOpenKeyExW
RegCloseKey
FreeSid
AllocateAndInitializeSid
gdi32
CreateDIBSection
SetTextColor
SetStretchBltMode
StretchBlt
SetBkMode
SelectObject
GetStockObject
GetDIBits
DeleteObject
DeleteDC
CreateSolidBrush
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
crypt32
CryptUnprotectData
mf
MFEnumDeviceSources
mfplat
MFStartup
MFShutdown
MFCreateAttributes
MFCreateMediaType
mfreadwrite
MFCreateSourceReaderFromMediaSource
ole32
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
kernel32
LoadLibraryExW
VirtualProtect
CreateProcessW
GetExitCodeProcess
GetCommandLineA
UnhandledExceptionFilter
RtlVirtualUnwind
GetStdHandle
GetCurrentProcess
IsProcessorFeaturePresent
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
WriteConsoleW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
GetTimeZoneInformation
IsValidCodePage
GetACP
RtlCaptureContext
GetOEMCP
FormatMessageW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetLastError
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
DeleteFileW
GetDriveTypeW
GetLogicalDriveStringsW
GetTempPathW
IsDebuggerPresent
CloseHandle
Sleep
ExitProcess
TerminateProcess
CreateThread
OpenProcess
GetTickCount
GetTickCount64
GetModuleFileNameW
GetModuleHandleW
LoadResource
LockResource
SizeofResource
FindResourceW
LocalFree
MultiByteToWideChar
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FlushFileBuffers
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
GetSystemTimeAsFileTime
FreeLibrary
GetProcessHeap
GetCurrentProcessId
LockFileEx
SetFilePointerEx
GetProcAddress
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
HeapReAlloc
WaitForSingleObjectEx
FlushViewOfFile
GetFileAttributesExW
GetLastError
RtlUnwind
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
UnlockFileEx
SetEndOfFile
OutputDebugStringA
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
GetFileSizeEx
ReadFile
AreFileApisANSI
RaiseException
GetOverlappedResult
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
FormatMessageA
GetLocaleInfoEx
GetExitCodeThread
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
CreateFile2
GetFileInformationByHandleEx
InitializeCriticalSectionEx
WakeAllConditionVariable
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
SetUnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
193KB
Virtual Size
192KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=260, version=33145,
count=8, id=259, version=33145,
count=10, id=259, version=35721,
count=17, id=260, version=35721,
count=89, id=261, version=35721,
count=23, id=257, version=33145,
count=235, id=1, productName=Unmarked objects,
count=189, id=261, version=33145,
count=1, id=260, version=36260,
count=1, id=261, version=36260,
count=1, id=255, version=36260,
count=1, id=258, version=36260,