1f3eda9c79a12fb768ae18dcc3bd53d5807f4a0a95bcc60500b2a7598fbf8338

General

Target
1f3eda9c79a12fb768ae18dcc3bd53d5807f4a0a95bcc60500b2a7598fbf8338
Size 959KB
Sample240613-ptagqayfpf
SHA256 1f3eda9c79a12fb768ae18dcc3bd53d5807f4a0a95bcc60500b2a7598fbf8338
MD5 cd6e144847bc94f6098e5a5416c2069a
SHA1 81ae5ba66760ca64e54a2ca71cf830959de0778d
SHA512 007db0de434750b5185556c54ee91de61221ca8fbc5592c3490804fb9086db586313aea6de43e9b5b0e81337819fca7cd5bee19afd152d0b3b89d1b28a86152f
SSDEEP 24576:cNatbZsej+IvuTrdAi3a+8G3nLFDdZiWbLtOQr:nfkH6iR8kLddZJOG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f3eda9c79a12fb768ae18dcc3bd53d5807f4a0a95bcc60500b2a7598fbf8338

File Explorer

1f3eda9c79a12fb768ae18dcc3bd53d5807f4a0a95bcc60500b2a7598fbf8338

.exe 959KB

1f3eda9c79a12fb768ae18dcc3bd53d5807f4a0a95bcc60500b2a7598fbf8338

IMPHASH bd06ef3d1edf89c03af5f08670febe1e
SHA256 1f3eda9c79a12fb768ae18dcc3bd53d5807f4a0a95bcc60500b2a7598fbf8338
MD5 cd6e144847bc94f6098e5a5416c2069a
SHA1 81ae5ba66760ca64e54a2ca71cf830959de0778d
SHA512 007db0de434750b5185556c54ee91de61221ca8fbc5592c3490804fb9086db586313aea6de43e9b5b0e81337819fca7cd5bee19afd152d0b3b89d1b28a86152f
SSDEEP 24576:cNatbZsej+IvuTrdAi3a+8G3nLFDdZiWbLtOQr:nfkH6iR8kLddZJOG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

496851

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\FastCopy\Obj\Release\FastCopy.pdb

kernel32

GetCurrentThreadId SuspendThread ResumeThread SetFileAttributesW Sleep GetFileInformationByHandle FormatMessageW LocalFileTimeToFileTime GetLastError FileTimeToSystemTime GetCurrentThread TerminateThread TlsAlloc CloseHandle GetLocalTime GetOverlappedResult DeleteCriticalSection SystemTimeToFileTime TlsGetValue SystemTimeToTzSpecificLocalTime TlsFree CreateEventA GetTickCount GetDriveTypeW SetFilePointer SetEndOfFile FlushFileBuffers GetFileSizeEx GetFileSize BackupRead BackupSeek GetFileTime BackupWrite CreateHardLinkW SetFileValidData FindFirstFileW CreateMutexA ReleaseMutex GetSystemTimeAsFileTime SetPriorityClass GetCommandLineW SetSystemPowerState GetCurrentProcess GetThreadLocale CreatePipe DuplicateHandle CreateFileW ProcessIdToSessionId TzSpecificLocalTimeToSystemTime GetCurrentProcessId SetThreadExecutionState GetSystemTime GetLongPathNameW GetFileAttributesExW GetStdHandle SetConsoleMode GetConsoleMode WriteConsoleW GetTempPathW CreateProcessW GetCurrentDirectoryW SetCurrentDirectoryW GetProcAddress FreeLibrary UnmapViewOfFile OpenMutexA CreateFileMappingA MapViewOfFile DeviceIoControl RemoveDirectoryW FindFirstChangeNotificationW GetVolumeNameForVolumeMountPointW FindCloseChangeNotification FindNextChangeNotification FindClose InitializeCriticalSection LeaveCriticalSection SetThreadPriority SetFileTime GetDiskFreeSpaceW WriteFile FindNextFileW EnterCriticalSection SetLastError TlsSetValue CancelIo GetVolumeInformationW ReadFile MoveFileW CopyFileW MoveFileExW CreateDirectoryW DeleteFileW OpenProcess GetUserDefaultLCID GetFileAttributesW InterlockedExchange VirtualProtect VirtualFree InterlockedCompareExchange VirtualAlloc GetModuleFileNameW SetEvent GetVersionExA GetModuleHandleW GetEnvironmentStringsW WriteConsoleA OutputDebugStringA AttachConsole OutputDebugStringW FreeConsole GetFileType AllocConsole SetThreadLocale FindFirstFileExW GetSystemDirectoryW GlobalAlloc GlobalFree LoadLibraryW GlobalLock MultiByteToWideChar WideCharToMultiByte CreateMutexW RtlCaptureStackBackTrace GetExitCodeThread RaiseException CreateThread IsBadReadPtr SetUnhandledExceptionFilter ExitProcess SizeofResource FindResourceA LockResource LoadResource GetSystemInfo VirtualQuery LoadLibraryExA EncodePointer DecodePointer GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW InitializeCriticalSectionAndSpinCount CreateEventW GetStringTypeW UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent ResetEvent WaitForSingleObjectEx IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwind LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetModuleFileNameA GetACP HeapAlloc HeapReAlloc HeapFree IsValidLocale EnumSystemLocalesW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA FreeEnvironmentStringsW GetProcessHeap SetStdHandle GetConsoleCP HeapSize SetFilePointerEx GetEnvironmentVariableW GetFullPathNameW WaitForSingleObject

gdi32

GetClipRgn GetObjectA Polyline CreateRectRgn CreatePen SetBkColor CreateSolidBrush GetObjectType SelectObject GetDeviceCaps DeleteDC SetTextColor SetBkMode SelectClipRgn LPtoDP DeleteObject CreateFontIndirectW DPtoLP

wintrust

WinVerifyTrust

Sharing

General

Malware Config

Signatures

File Explorer

1f3eda9c79a12fb768ae18dcc3bd53d5807f4a0a95bcc60500b2a7598fbf8338

kernel32

gdi32

wintrust

generic