FastCopy[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

FastCopy.exe
Size

614KB
MD5

797a0f0d50f8a77d766e63efae63716d
SHA1

1ee10ce5050b25479d2b48be33453debe96bf5fc
SHA256

ca577251435999f171084f5aeadc033a83256cd5eda503a6507dcd6eed1b68c4
SHA512

57cd447fd9210cda1cb3d228d65b982279e3f6084dad90e43cd7fb84596015d4f296f23ff4f9b4d2a3b58ae7a5b64aff6a8e58a9a914dc7b8fa3cc05b146c17c
SSDEEP

12288:Mf/sSJlUfh2yxodrhe2kVok4rH/iwoZgMwSH3HKtZXT:fSJ4odrhe2kR4TqwoZhwSatZD

Score

1^/10

Malware Config

Signatures

Files

FastCopy.exe
.exe windows:6 windows x64 arch:x64

430bf3bef86e61c4061dc0a6ff2ed23c

Code Sign

1e:e6:d2:b0:d0:fd:1d:3f:62:d0:49:19:b7:04:de:97
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

24/09/2018, 00:00

Not After

23/09/2021, 23:59

Subject

CN=FastCopy Lab\, LLC.,O=FastCopy Lab\, LLC.,POSTALCODE=220-0004,STREET=1-11-1 Kitasaiwai-cho\, Nishi-ku,L=Yokohama-shi,ST=Kanagawa,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

fb:f4:2d:9a:6e:f3:44:05:86:7a:95:27:ff:b3:21:1b:75:ff:b0:91:89:ff:db:de:28:70:c3:81:27:54:6b:00
Signer

Actual PE Digest

fb:f4:2d:9a:6e:f3:44:05:86:7a:95:27:ff:b3:21:1b:75:ff:b0:91:89:ff:db:de:28:70:c3:81:27:54:6b:00

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetSystemPowerState
GetCurrentProcess
GetThreadLocale
CreatePipe
CreateMutexA
DuplicateHandle
OpenProcess
ProcessIdToSessionId
TzSpecificLocalTimeToSystemTime
GetUserDefaultLCID
SetDllDirectoryA
GetLocalTime
GetCurrentProcessId
SystemTimeToFileTime
SetThreadExecutionState
GetSystemTime
GetStdHandle
ReleaseMutex
AttachConsole
WriteConsoleW
GetTempPathW
CreateProcessW
RemoveDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetSystemDefaultLCID
GetProcAddress
FreeLibrary
UnmapViewOfFile
OpenMutexA
CreateFileMappingA
MapViewOfFile
DeviceIoControl
FindFirstChangeNotificationW
GetVolumeNameForVolumeMountPointW
FindCloseChangeNotification
FindNextChangeNotification
SetThreadLocale
VirtualProtect
VirtualFree
VirtualAlloc
GetSystemDirectoryW
GetModuleHandleA
SetEvent
GetVersionExA
GlobalAlloc
GlobalFree
LoadLibraryW
GlobalLock
GetTickCount
MultiByteToWideChar
WideCharToMultiByte
CreateMutexW
GetModuleFileNameA
WriteConsoleA
OutputDebugStringA
GetCurrentThreadId
RtlCaptureStackBackTrace
GetExitCodeThread
OutputDebugStringW
CreateFileA
RaiseException
SetPriorityClass
CreateThread
IsBadReadPtr
SetUnhandledExceptionFilter
ExitProcess
SizeofResource
FindResourceA
LockResource
LoadResource
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
LCMapStringW
GetStringTypeW
GetFileType
HeapFree
HeapReAlloc
HeapAlloc
GetACP
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
EncodePointer
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
GetModuleHandleW
VirtualQuery
GetSystemInfo
CreateHardLinkW
SetFileTime
GetFileSizeEx
BackupWrite
GetFileTime
BackupSeek
BackupRead
GetFileSize
SetLastError
ReadFile
FlushFileBuffers
SetFileAttributesW
SetEndOfFile
SetFilePointer
GetDriveTypeW
CreateEventA
TlsFree
SystemTimeToTzSpecificLocalTime
TlsGetValue
DeleteCriticalSection
GetOverlappedResult
TlsAlloc
TerminateThread
GetCurrentThread
FileTimeToSystemTime
GetLastError
FormatMessageW
GetFileInformationByHandle
Sleep
ResumeThread
SuspendThread
WaitForSingleObject
FindClose
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
GetDiskFreeSpaceW
FindNextFileW
EnterCriticalSection
TlsSetValue
GetCommandLineW
FindFirstFileExW
CancelIo
GetVolumeInformationW
MoveFileW
CopyFileW
MoveFileExW
CloseHandle
DeleteFileW
GetFileAttributesW
CreateFileW
GetModuleFileNameW
WriteFile
GetFullPathNameW
CreateDirectoryW

user32

BeginDeferWindowPos
GetWindowPlacement
EndDialog
DeferWindowPos
CreateDialogParamW
EndPaint
BeginPaint
IsDialogMessageA
PostMessageW
DispatchMessageA
DestroyWindow
IsWindowVisible
MessageBoxW
SetActiveWindow
SetWindowLongPtrW
SetWindowTextW
GetScrollInfo
GetWindowLongPtrW
TranslateAcceleratorA
GetDlgItemTextA
DispatchMessageW
SetTimer
CallWindowProcA
PeekMessageW
GetWindowTextA
SetDlgItemTextW
SetWindowTextA
AttachThreadInput
GetDlgItemTextW
SendDlgItemMessageW
MoveWindow
DefWindowProcA
TranslateAcceleratorW
TranslateMessage
SetDlgItemTextA
GetDlgItemInt
EndDeferWindowPos
PeekMessageA
CheckDlgButton
SetDlgItemInt
UpdateWindow
SetForegroundWindow
InvalidateRect
IsIconic
GetWindowTextW
LoadStringA
LoadStringW
MessageBoxA
GetFocus
GetDlgCtrlID
CharLowerW
GetMenuState
CallWindowProcW
GetWindow
SetWindowPos
CreateWindowExW
BringWindowToTop
SendMessageA
CharUpperW
PostMessageA
EnableWindow
GetCursorPos
ReleaseDC
PtInRect
EnableMenuItem
GetMessageA
DialogBoxParamW
IsWindow
RegisterClassW
IsDialogMessageW
RegisterClassA
PostQuitMessage
KillTimer
AppendMenuW
GetMessageW
DefWindowProcW
GetClientRect
GetDlgItem
CheckMenuItem
SystemParametersInfoA
InsertMenuW
DrawMenuBar
SendDlgItemMessageA
SetFocus
DestroyMenu
FlashWindow
IsDlgButtonChecked
GetClassNameW
AppendMenuA
DrawTextW
GetParent
LoadCursorA
RegisterWindowMessageA
LoadAcceleratorsA
SetClassLongPtrA
GetSysColor
SetCapture
SetCursor
LoadIconA
GetWindowLongPtrA
GetMenuStringA
SetWindowLongPtrA
ReleaseCapture
ModifyMenuA
GetWindowThreadProcessId
GetWindowTextLengthW
ModifyMenuW
GetKeyState
MonitorFromPoint
GetWindowRect
GetMenu
GetDC
GetMenuItemCount
DeleteMenu
ScreenToClient
SendMessageW
GetSystemMetrics
CreatePopupMenu
TrackPopupMenu
GetSubMenu
ShowWindow
GetMonitorInfoW
ClientToScreen
IsChild
GetForegroundWindow
IsWindowEnabled

gdi32

SelectObject
GetObjectA
SetBkColor
CreateSolidBrush
GetDeviceCaps
LPtoDP
DeleteObject
DPtoLP
CreateFontIndirectW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseFontW

advapi32

LookupPrivilegeValueA
RegCloseKey
RegQueryValueW
RegOpenKeyExW
RegQueryValueExW
CryptDestroyKey
CryptVerifySignatureA
CryptImportKey
CryptAcquireContextA
InitiateSystemShutdownExA
LookupAccountNameW
AddAccessAllowedAce
GetUserNameW
InitializeAcl
SetNamedSecurityInfoW
OpenProcessToken
CryptCreateHash
AdjustTokenPrivileges
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptGenRandom

ole32

CoUninitialize
CreateStreamOnHGlobal
PropVariantClear
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree

msimg32

GradientFill

dbghelp

MiniDumpWriteDump

wininet

InternetConnectA
HttpSendRequestA
InternetCloseHandle
InternetReadFile
HttpAddRequestHeadersA
InternetCrackUrlA
HttpOpenRequestA
HttpQueryInfoA
InternetOpenA

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

430bf3bef86e61c4061dc0a6ff2ed23c

Code Sign

1e:e6:d2:b0:d0:fd:1d:3f:62:d0:49:19:b7:04:de:97Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

fb:f4:2d:9a:6e:f3:44:05:86:7a:95:27:ff:b3:21:1b:75:ff:b0:91:89:ff:db:de:28:70:c3:81:27:54:6b:00Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

msimg32

dbghelp

wininet

Sections

.text Size: 364KB - Virtual size: 363KB

.rdata Size: 126KB - Virtual size: 126KB

.data Size: 11KB - Virtual size: 222KB

.pdata Size: 19KB - Virtual size: 18KB

.rsrc Size: 86KB - Virtual size: 85KB

1e:e6:d2:b0:d0:fd:1d:3f:62:d0:49:19:b7:04:de:97
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

fb:f4:2d:9a:6e:f3:44:05:86:7a:95:27:ff:b3:21:1b:75:ff:b0:91:89:ff:db:de:28:70:c3:81:27:54:6b:00
Signer

.text
Size: 364KB - Virtual size: 363KB

.rdata
Size: 126KB - Virtual size: 126KB

.data
Size: 11KB - Virtual size: 222KB

.pdata
Size: 19KB - Virtual size: 18KB

.rsrc
Size: 86KB - Virtual size: 85KB