infaz.zip
- SHA256 5f2adaef73f269e93e96272b7a0686a7292bdf4b7d4163c9cc1e5d901f44c9de
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
infaz.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
31 signatures
150 seconds
Behavioral task
behavioral2
Sample
infaz.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
31 signatures
150 seconds
General
- Target infaz.zip
- Size 828KB
- Sample261111-ymazcabg75
- SHA256 5f2adaef73f269e93e96272b7a0686a7292bdf4b7d4163c9cc1e5d901f44c9de
- MD5 0048352c35904f54ae1dea4c72d84319
- SHA1 5d2d4531e6c3dae47ba9221e15f0b0241dfe9922
- SHA512 50fc5344e0441b8b52d5832c6bf2cc4dd57b7aca72ddb26e177126cd125a2cf093e0d0cfbf1e17373b50bf9165c6bebcabd1152c23b13d6ca504727f73609adb
- SSDEEP 12288:7Dx0NEg5a98Z/hMw4JVjnV58qzxCbrhcHLscxez+LAtCNPanSa68Jxo7Fykns81L:nxVyaOqJV7XyrZc8n8FHv8JxoRDswL
- TLSH T1080533D353D7A0AF92D48E322D2BE0AD1DDE74459E3411CDAE49BB979118778036CCC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/infaz.exe
File Explorer
-
infaz.zip.zip 828KB
-
infaz.exe.exe 1.4MB
infaz.exe
- IMPHASH 9657e54c548045bc2d64136c60619c69
- SHA256 66fa17e20b01e217c7c6b3f7f4598093e94f91615f90db3972b2ebec20fbf0af
- MD5 c816531d90eec520339cf41ac7268794
- SHA1 3e1f5e8e392f799b58d315b5f1a5693f31481912
- SHA512 507f587090990c8fd1d790987ac8bd813538e4a1df32cd1dc63d197f33bbc0036653e98d888b9e2a048f5a6592be36c472041418020553c2f5bce66274b2cebb
- SSDEEP 24576:euwFfrg4uMSKmD4hfWIBLFJRt9EGlRRAxW+p2Tv5FKmeUf2nyC:1wl04uMSKmD4hfWIBpJRFlRmSn127
- TLSH T15D658E0BB3B900EDD167C279C9175A07EBB274051324ABDF5790CA662F23EE15B7A321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1018464
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
RegisterClassW
CreateWindowExW
DispatchMessageW
DefWindowProcW
ShowWindow
SetWindowPos
GetKeyState
GetSystemMetrics
DrawTextW
SetForegroundWindow
GetMessageW
GetDC
ReleaseDC
BeginPaint
EndPaint
GetClientRect
FindWindowW
FillRect
wininet
InternetCrackUrlW
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
InternetOpenUrlW
shell32
ShellExecuteExW
SHGetFolderPathW
ShellExecuteW
advapi32
RegOpenKeyExW
CheckTokenMembership
FreeSid
RegSetValueExW
AllocateAndInitializeSid
RegCloseKey
gdi32
CreateDIBSection
SetTextColor
SetStretchBltMode
StretchBlt
SetBkMode
SelectObject
GetStockObject
GetDIBits
DeleteObject
DeleteDC
CreateSolidBrush
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
crypt32
CryptUnprotectData
CryptStringToBinaryA
mf
MFEnumDeviceSources
mfplat
MFStartup
MFShutdown
MFCreateAttributes
MFCreateMediaType
mfreadwrite
MFCreateSourceReaderFromMediaSource
ole32
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
kernel32
LoadLibraryExW
VirtualProtect
CreateProcessW
GetOEMCP
UnhandledExceptionFilter
RtlVirtualUnwind
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
GetTimeZoneInformation
IsValidCodePage
RtlCaptureContext
GetACP
WriteConsoleW
GetExitCodeProcess
HeapSize
GetStdHandle
GetCurrentProcess
IsProcessorFeaturePresent
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetLastError
DeleteFileW
GetDriveTypeW
GetTempPathW
IsDebuggerPresent
CloseHandle
GetLastError
Sleep
ExitProcess
TerminateProcess
CreateThread
OpenProcess
GetTickCount
GetTickCount64
GetModuleFileNameW
GetModuleHandleW
LoadResource
LockResource
SizeofResource
FindResourceW
LocalFree
MultiByteToWideChar
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FlushFileBuffers
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
GetSystemTimeAsFileTime
FreeLibrary
GetProcessHeap
GetCurrentProcessId
LockFileEx
SetFilePointerEx
GetProcAddress
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
HeapReAlloc
WaitForSingleObjectEx
FlushViewOfFile
GetFileAttributesExW
FormatMessageW
RtlUnwind
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
UnlockFileEx
SetEndOfFile
OutputDebugStringA
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
GetFileSizeEx
ReadFile
AreFileApisANSI
RaiseException
GetOverlappedResult
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
FormatMessageA
GetLocaleInfoEx
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
CreateFile2
GetFileInformationByHandleEx
InitializeCriticalSectionEx
WakeAllConditionVariable
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
SetUnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RtlLookupFunctionEntry
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
201KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=260, version=33145,
count=8, id=259, version=33145,
count=10, id=259, version=35721,
count=17, id=260, version=35721,
count=90, id=261, version=35721,
count=23, id=257, version=33145,
count=233, id=1, productName=Unmarked objects,
count=189, id=261, version=33145,
count=1, id=260, version=36260,
count=1, id=261, version=36260,
count=1, id=255, version=36260,
count=1, id=258, version=36260,