Static task
static1
Behavioral task
behavioral1
Sample
FastDos.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
FastDos.exe
Resource
win10v2004-20240426-en
General
-
Target
FastDos.exe
-
Size
68KB
-
MD5
51300bb184d924671dbbad836549eb72
-
SHA1
7b6e87bd13c637318fd184d728f4c42f0cea9b27
-
SHA256
51ffe35611eef0bd02bf059aecf3d854b1805bda676ee93b9c1eda0b99064c03
-
SHA512
9326f59d3cd032625b5535e2e68450536dc05e9da5d02eaf57a4bc1816ed0bae14ef3ed9bd2dcd6f189a154544a92896e9aa58a73901f439e8eed35fcd504f1c
-
SSDEEP
1536:FT38CmdgsAo+/ePvjvSFPQsLYNRePBO/e695+S:FIlpEP3We695+S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FastDos.exe
Files
-
FastDos.exe.exe windows:5 windows x86 arch:x86
6e0a9dba53f882211576f4181ae447fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
ReadFile
GetCurrentProcess
GetModuleHandleA
SetFilePointer
TerminateProcess
CreateEventW
GetTickCount
ResetEvent
GetOverlappedResult
FlushFileBuffers
DisconnectNamedPipe
CreateFileW
QueryPerformanceCounter
Sleep
CloseHandle
WaitForSingleObject
CreateThread
GetCurrentProcessId
SetConsoleTitleW
SetConsoleCtrlHandler
WaitForMultipleObjects
WriteConsoleOutputW
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleScreenBufferSize
SetConsoleOutputCP
ReadConsoleInputW
SetConsoleCP
SetConsoleMode
GetLastError
GetStdHandle
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapSize
GetLocaleInfoA
LocalAlloc
LocalFree
SetLastError
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
HeapFree
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RaiseException
user32
wsprintfW
ws2_32
gethostbyname
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ