cFosSpeed 12[.]51[.]2533[.]7z

Sharing

Copy URL Twitter E-mail

General

Target
cFosSpeed 12.51.2533.7z
Size 5.8MB
Sample240601-ds6yragf47
SHA256 c540b1ea9074cada38693cddec36f0d0b5583aed6fcaabcbd0b00caa67d3a4c2
MD5 e68853d8aa376028d62d392e6fad9987
SHA1 5f95f4896b194f9f689d8f2558270159c5ed1cdd
SHA512 e3668e0445362d010ebbe596ee4c875bddb57a76f0dc724e82a1583f8401929b8bc64d93e8836844977935956e21839fde321c8abda75bc194ae12decfe0d570
SSDEEP 98304:krttIJOE8/nRa7WuJMFVAepc0ixGjWXlUUhDJIzdjrobyZcCOXR/jAwl3T8:GttvpRFudX0jilbdqjrobyyp1l3I
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cFosSpeed 12.51.2533.exe

File Explorer

cFosSpeed 12.51.2533.7z

.7z 5.8MB
cFosSpeed 12.51.2533.exe

.exe 5.8MB

cFosSpeed 12.51.2533.7z

SHA256 c540b1ea9074cada38693cddec36f0d0b5583aed6fcaabcbd0b00caa67d3a4c2
MD5 e68853d8aa376028d62d392e6fad9987
SHA1 5f95f4896b194f9f689d8f2558270159c5ed1cdd
SHA512 e3668e0445362d010ebbe596ee4c875bddb57a76f0dc724e82a1583f8401929b8bc64d93e8836844977935956e21839fde321c8abda75bc194ae12decfe0d570
SSDEEP 98304:krttIJOE8/nRa7WuJMFVAepc0ixGjWXlUUhDJIzdjrobyZcCOXR/jAwl3T8:GttvpRFudX0jilbdqjrobyyp1l3I
MD5 SHA1 SHA512 SSDEEP

Password

LЧVЮ=7vЛ+ыПЫнiбф4!ФWщЮ;NгЯЭБm=ы[;_U9WЩбW#u&j&m?-++жЦhq№fЖтjы%ч$ж}ю4мUя4бЫ;Г:Цвё~Ш9ЁЖ{Гj4VfFh_j;Ёvн9#

cFosSpeed 12.51.2533.exe

SHA256 5fabe7e0b6bde0145863e1d199f5431a9787821738ac177d5b99743117bb322e
MD5 bbb0973708862723cfea79c96f17120b
SHA1 3ebea58c654820a7266ec4e50c61704d60ce10c6
SHA512 5fcda7ce037a990b4e4072290b92a48de08444d782db83636bfe9a5339e9036149716f19617ebb8866f3ad4ba60c4d6f64ffe71a56e589fb79e0a2be4e435d94
SSDEEP 98304:HpsI+4u6JCX3dB6TOQ9PxOvdy+6iyFUQ77sOU0rrywpmg0bomp4eK5Zphau3yJD5:GI+4uTXt+9JOP6jFUQ77sO7rrrYRbtVh
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

LЧVЮ=7vЛ+ыПЫнiбф4!ФWщЮ;NгЯЭБm=ы[;_U9WЩбW#u&j&m?-++жЦhq№fЖтjы%ч$ж}ю4мUя4бЫ;Г:Цвё~Ш9ЁЖ{Гj4VfFh_j;Ёvн9#

Minor OS version

Major OS version

Entry point

39956

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1024B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

cFosSpeed 12.51.2533.7z

cFosSpeed 12.51.2533.exe

generic