02507669f1e19b8d189b41c37d6eabd0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
02507669f1e19b8d189b41c37d6eabd0N.exe
Size 301KB
Sample240816-bsdk4axcqc
SHA256 778541a97e25815320658acbdc64abfe8904bb51ceaa90e49c044b48c925f017
MD5 02507669f1e19b8d189b41c37d6eabd0
SHA1 6b3d6cb6704190c3206369507313a12fbae85a76
SHA512 50a3f87a7245039b291e59b58a0bff1e0247d1b1461720a69d8de9a134687c5aef22c00f0ae2b813f0794c1f75ab0ab5ed10cbdce8f7c06ab4987c83dee6e6ba
SSDEEP 6144:ZIIII396mCObwFd8nhbr9+3Ig5wqRbOwHO4BV+UdvrEFp7hKC93:pCObwDQT+4g5wmu4BjvrEH7393
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

02507669f1e19b8d189b41c37d6eabd0N.exe

.dll 301KB

02507669f1e19b8d189b41c37d6eabd0N.exe

IMPHASH 59620dfff03ee0840945d8ea63074ced
SHA256 778541a97e25815320658acbdc64abfe8904bb51ceaa90e49c044b48c925f017
MD5 02507669f1e19b8d189b41c37d6eabd0
SHA1 6b3d6cb6704190c3206369507313a12fbae85a76
SHA512 50a3f87a7245039b291e59b58a0bff1e0247d1b1461720a69d8de9a134687c5aef22c00f0ae2b813f0794c1f75ab0ab5ed10cbdce8f7c06ab4987c83dee6e6ba
SSDEEP 6144:ZIIII396mCObwFd8nhbr9+3Ig5wqRbOwHO4BV+UdvrEFp7hKC93:pCObwDQT+4g5wmu4BjvrEH7393
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

PE Signature issue

Digest

b7:a4:8a:e6:2c:0f:d7:ca:2e:8d:92:d3:d8:d8:eb:79:b3:2f:7f:45:20:02:72:57:49:06:87:52:46:ed:e7:c3

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=FastCopy Lab\, LLC.,O=FastCopy Lab\, LLC.,ST=Kanagawa,C=JP

Chains

Jun 20, 2024

CN=FastCopy Lab\, LLC.,O=FastCopy Lab\, LLC.,ST=Kanagawa,C=JP

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=FastCopy Lab\, LLC.,O=FastCopy Lab\, LLC.,ST=Kanagawa,C=JP

Serial Number

56:21:cb:0b:b7:52:7f:9b:05:d2:ee:53:99:51:59:80

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 22, 2021 - Sep 27, 2024

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

82132

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\FastCopy\Obj\ReleaseShl\FastExt1.pdb

kernel32

GetSystemDefaultLCID GetLongPathNameW GetCurrentProcess GetStdHandle WriteFile GetModuleFileNameW GetThreadLocale CreatePipe GetFileAttributesW DuplicateHandle CloseHandle GlobalLock CreateProcessW GlobalUnlock GetEnvironmentVariableW GetFullPathNameW CreateFileW GetLastError SetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetProcAddress DeleteCriticalSection GetCurrentProcessId GetModuleHandleW FreeLibrary GetTickCount FindClose MultiByteToWideChar WideCharToMultiByte VirtualProtect GetCommandLineW GetVersionExA GetEnvironmentStringsW GetCurrentThreadId WriteConsoleW GetFileType GetModuleFileNameA RaiseException SetUnhandledExceptionFilter ExitProcess GetSystemInfo VirtualQuery LoadLibraryExA UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount CreateEventW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind InterlockedFlushSList EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetModuleHandleExW HeapReAlloc HeapFree HeapAlloc GetACP LCMapStringW GetStringTypeW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA FreeEnvironmentStringsW GetProcessHeap SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize SetFilePointerEx DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

02507669f1e19b8d189b41c37d6eabd0N.exe

PE Signature issue

kernel32

generic