2d2551081d02ee3fd371e1dc6665a78df8d76092fda0e5c4613e61d7ffe6900d

Sharing

Copy URL Twitter E-mail

General

Target
2d2551081d02ee3fd371e1dc6665a78df8d76092fda0e5c4613e61d7ffe6900d
Size 1.2MB
Sample260819-vbexdayckh
SHA256 2d2551081d02ee3fd371e1dc6665a78df8d76092fda0e5c4613e61d7ffe6900d
MD5 a14f87933eb6147a5c59a5fee3cee379
SHA1 6f755c7a854d5dd3e0dc770f256395ef378c70a7
SHA512 6fc9b03ba287feb7cef0b60a1a816f74d15a7334fff020516cca04d7de18d46f02478b7d7bdc7b74f959fdbdf4962f93bc80dfb8b67d1787b97f3543bceaa249
SSDEEP 12288:uGtlqIvF+/T8I1rRaGVEx07Frpw+Kn/yTg+wa+zTzdTq59LYfKBJdbVIN2M97kZu:uGtlq7T8IFk4zgdm5GCtVIN24kZxU
TLSH
T1B3456C5163A500E8E5B7D538CEA24767FBB278121770CACF13A4964A1F33BD09E39762
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d2551081d02ee3fd371e1dc6665a78df8d76092fda0e5c4613e61d7ffe6900d

File Explorer

2d2551081d02ee3fd371e1dc6665a78df8d76092fda0e5c4613e61d7ffe6900d

.exe 1.2MB

2d2551081d02ee3fd371e1dc6665a78df8d76092fda0e5c4613e61d7ffe6900d

IMPHASH a6cd5c6b979e85acc9d91a27c46b86ad
SHA256 2d2551081d02ee3fd371e1dc6665a78df8d76092fda0e5c4613e61d7ffe6900d
MD5 a14f87933eb6147a5c59a5fee3cee379
SHA1 6f755c7a854d5dd3e0dc770f256395ef378c70a7
SHA512 6fc9b03ba287feb7cef0b60a1a816f74d15a7334fff020516cca04d7de18d46f02478b7d7bdc7b74f959fdbdf4962f93bc80dfb8b67d1787b97f3543bceaa249
SSDEEP 12288:uGtlqIvF+/T8I1rRaGVEx07Frpw+Kn/yTg+wa+zTzdTq59LYfKBJdbVIN2M97kZu:uGtlq7T8IFk4zgdm5GCtVIN24kZxU
TLSH
T1B3456C5163A500E8E5B7D538CEA24767FBB278121770CACF13A4964A1F33BD09E39762
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

639184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\FastCopy\x64\Obj\Release\FastCopy.pdb

kernel32

CreateDirectoryW GetFullPathNameW GetFileAttributesW GetUserDefaultLCID DeleteFileW MoveFileExW CopyFileW MoveFileW ReadFile GetVolumeInformationW CancelIo TlsSetValue SetLastError EnterCriticalSection FindNextFileW WriteFile GetDiskFreeSpaceW SetFileTime SetThreadPriority LeaveCriticalSection InitializeCriticalSection FindClose WaitForSingleObject CreateFileW GetCurrentThreadId SuspendThread ResumeThread SetFileAttributesW Sleep GetFileInformationByHandle FormatMessageW LocalFileTimeToFileTime GetLastError FileTimeToSystemTime GetCurrentThread TerminateThread TlsAlloc CloseHandle GetLocalTime GetOverlappedResult DeleteCriticalSection SystemTimeToFileTime TlsGetValue SystemTimeToTzSpecificLocalTime TlsFree CreateEventA GetTickCount GetDriveTypeW SetFilePointer SetEndOfFile FlushFileBuffers GetFileSizeEx BackupRead BackupSeek GetFileTime BackupWrite CreateHardLinkW SetFilePointerEx SetFileValidData FindFirstFileW CreateMutexA ReleaseMutex GetFileSize GetSystemTimeAsFileTime SetDllDirectoryW SetPriorityClass GetCommandLineW SetSystemPowerState GetCurrentProcess GetThreadLocale CreatePipe DuplicateHandle GetModuleHandleA OpenProcess ProcessIdToSessionId TzSpecificLocalTimeToSystemTime GetCurrentProcessId SetThreadExecutionState GetSystemTime GetLongPathNameW GetFileAttributesExW CreateProcessW GetStdHandle SetConsoleMode GetConsoleMode WriteConsoleW GetTempPathW GetCurrentDirectoryW SetCurrentDirectoryW GetModuleFileNameW GetProcAddress FreeLibrary UnmapViewOfFile OpenMutexA CreateFileMappingA MapViewOfFile DeviceIoControl RemoveDirectoryW FindFirstChangeNotificationW GetVolumeNameForVolumeMountPointW FindCloseChangeNotification FindNextChangeNotification GetEnvironmentVariableW HeapSize GetConsoleOutputCP SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapReAlloc VirtualFree VirtualAlloc SetEvent GetVersionExA GetModuleHandleW GetEnvironmentStringsW IsDebuggerPresent WriteConsoleA OutputDebugStringA AttachConsole OutputDebugStringW FreeConsole GetFileType AllocConsole SetThreadLocale FindFirstFileExW TerminateProcess GetSystemDirectoryW CreateToolhelp32Snapshot GetExitCodeThread Process32NextW GlobalAlloc Process32FirstW GlobalFree LoadLibraryW GetWindowsDirectoryW GlobalLock MultiByteToWideChar WideCharToMultiByte CreateMutexW GlobalMemoryStatusEx ExitProcess GetModuleFileNameA RtlCaptureStackBackTrace GetModuleHandleExA RaiseException K32GetModuleInformation CreateThread IsBadReadPtr SetUnhandledExceptionFilter SizeofResource FindResourceA LockResource LoadResource GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA LCMapStringEx InitializeCriticalSectionEx EncodePointer DecodePointer CompareStringEx GetCPInfo GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwindEx RtlPcToFileHeader InitializeCriticalSectionAndSpinCount LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetLocaleInfoW IsValidLocale EnumSystemLocalesW

oleaut32

VariantClear SafeArrayCreateVector SafeArrayPutElement VariantInit SafeArrayGetUBound SafeArrayGetElement SafeArrayGetLBound SysFreeString SysAllocString

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

Name

.text

Size

781KB

Virtual Size

781KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

237KB

Virtual Size

236KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

374KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

148KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2d2551081d02ee3fd371e1dc6665a78df8d76092fda0e5c4613e61d7ffe6900d

kernel32

oleaut32

version

generic