fas2lsp.rar
- SHA256 0f85999ec6396aee4a1355b60caa1dc6e9adba1e46915d7bbd53ce28e2906f1d
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fas2lsp.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
fas2lsp.exe
Resource
win11-20260513-en
windows11-21h2-x64
5 signatures
150 seconds
General
- Target fas2lsp.rar
- Size 533KB
- Sample260529-smrzzaev91
- SHA256 0f85999ec6396aee4a1355b60caa1dc6e9adba1e46915d7bbd53ce28e2906f1d
- MD5 241cec2b4a2d676949e71238b728d9a3
- SHA1 5504de838714c227e0fcf8eb0215f4cea48948f7
- SHA512 f3d9fd643cb49af96fec9ee2512137ca587553d895f3ec69803ab02b89132151dae4249f158051cb96975f3c028bb7cd25b20a97ad1475bee45b19f0871f1625
- SSDEEP 12288:nd47RCi47+szq23e+DOqyXyQd1TV9ByBqDmzfRYbm:d4dx4m+GXyQLTz7mz5
- TLSH T143C4234833333E259CC2E0059A6F4B971566BA60FCB51C8978752C32914ADE39B2DB7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fas2lsp.exe
File Explorer
-
fas2lsp.rar.rar 533KB
-
fas2lsp.exe.exe 969KB
fas2lsp.exe
- IMPHASH 4e3ee9831471afd20be4087303eec0e2
- SHA256 5427ccadb45a2d13d73b0b868311f71639f0e5e5d8ea613a235492c53b2752b7
- MD5 b11f932a786da9d44ee31abc0f92aa7a
- SHA1 6a3881056914da405426b126edb0e66a8a392374
- SHA512 05c0295d5400996e1cf83b5873223ee20c698031f562f2705596ad2b294db6efe140ce02b007af8be98a8e46ad8ed75c0d845011ab26a5c89c8e03c9a0ff50e5
- SSDEEP 12288:UVF98VgifPrtI+1PCJ4orfzl7//c55tR78PlAYzqiTsv+ck8xSMrdHxP:fgifZfm7z9/055T78Plj24GZSMRx
- TLSH T1A025D081B682C571C0BF0A720531E21DB37414258765EEDFAFC561E83F736C1A93DAAA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
5427
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetLastError
DeleteCriticalSection
SetLastError
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
HeapReAlloc
RtlUnwind
HeapSize
GetSystemDefaultLCID
GlobalFree
GetModuleHandleA
GlobalUnlock
CloseHandle
CreateFileA
CreateProcessA
ExitProcess
GetDriveTypeA
GetFileSize
GlobalAlloc
ReadFile
WriteFile
lstrlenA
GlobalLock
LoadLibraryA
GetProcAddress
FreeLibrary
InitializeCriticalSection
GetModuleFileNameW
GetModuleHandleW
TerminateProcess
GetCurrentProcess
LoadLibraryW
CreateEventW
CompareStringW
VirtualProtect
GetTickCount
VirtualFree
VirtualAlloc
WriteProcessMemory
CreateToolhelp32Snapshot
GetCurrentProcessId
GetCurrentThreadId
Thread32First
OpenThread
Thread32Next
SuspendThread
ResumeThread
GetSystemInfo
LoadResource
MultiByteToWideChar
WideCharToMultiByte
FindResourceExW
FindResourceExA
GetThreadLocale
GetUserDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
HeapDestroy
HeapCreate
GetSystemTime
GetLocalTime
SystemTimeToFileTime
CompareFileTime
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
RaiseException
Sleep
LockResource
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
VirtualQuery
user32
MessageBoxW
SetClipboardData
OpenClipboard
MessageBoxA
EmptyClipboard
CloseClipboard
CharUpperBuffW
comdlg32
GetOpenFileNameA
oleaut32
SysAllocStringByteLen
Name
.text
Size
103KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
267KB
Virtual Size
524KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
576KB
Virtual Size
6.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
NewIAT
Size
1KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
NewAntid
Size
512B
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
SaveHook
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
ResHeap
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.scy
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=30, id=19, version=8078,
count=4, id=18, version=8444,