4ba7d93294a92ca6171b13de600d2c02957a07db5df574b70221169484666aa4

General

Target
4ba7d93294a92ca6171b13de600d2c02957a07db5df574b70221169484666aa4
Size 4.8MB
Sample260822-e8d4ca1clc
SHA256 4ba7d93294a92ca6171b13de600d2c02957a07db5df574b70221169484666aa4
MD5 3a7bcdd698d351a9c032448a2e4518cf
SHA1 51aa881f2d6ef2adc4f06ac58ebf96fa46a7b3ff
SHA512 6fde7252d11aa20f2494ff7527a85df14affddbf5df9fabaff3908fdfa23b05db28b4f896bb9bbebf093a0c2ffbda464976b896c8f8978d62f3d517436d7c2e6
SSDEEP 98304:IAmQ4+hgMoPgx/YaCeh0UEvW2e9VMUeExzjvWhYrzuk93jL9M7:/o4xxNZEvWlJxz71nhFM7
TLSH
T1813623417BE2C1B2F5B345714DB9AA3A563CB9100B3588E7E3E5063D9E349C12B31BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ba7d93294a92ca6171b13de600d2c02957a07db5df574b70221169484666aa4

File Explorer

4ba7d93294a92ca6171b13de600d2c02957a07db5df574b70221169484666aa4

.exe 4.8MB

4ba7d93294a92ca6171b13de600d2c02957a07db5df574b70221169484666aa4

IMPHASH d91e9b8add19a7c1b3b0df96bafc4983
SHA256 4ba7d93294a92ca6171b13de600d2c02957a07db5df574b70221169484666aa4
MD5 3a7bcdd698d351a9c032448a2e4518cf
SHA1 51aa881f2d6ef2adc4f06ac58ebf96fa46a7b3ff
SHA512 6fde7252d11aa20f2494ff7527a85df14affddbf5df9fabaff3908fdfa23b05db28b4f896bb9bbebf093a0c2ffbda464976b896c8f8978d62f3d517436d7c2e6
SSDEEP 98304:IAmQ4+hgMoPgx/YaCeh0UEvW2e9VMUeExzjvWhYrzuk93jL9M7:/o4xxNZEvWlJxz71nhFM7
TLSH
T1813623417BE2C1B2F5B345714DB9AA3A563CB9100B3588E7E3E5063D9E349C12B31BE9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

249035

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\FastCopy\src\install\Obj\ReleaseInst\setup.pdb

kernel32

ReadFile FindFirstFileW FindNextFileW WriteFile FindClose WaitForSingleObject CreateFileW DeleteFileW CloseHandle GetLocalTime GetFileSize GetSystemTimeAsFileTime CreateDirectoryW GetCommandLineW GetFullPathNameW RemoveDirectoryW GetModuleFileNameW GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW GetProcAddress CreateProcessW FreeLibrary CopyFileW SetDllDirectoryW MoveFileW GetEnvironmentVariableW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetTempPathW Sleep GetLastError SetEvent GetVersionExA DeleteCriticalSection GetModuleHandleW GetEnvironmentStringsW IsDebuggerPresent SetLastError GetStdHandle WriteConsoleA OutputDebugStringA GetCurrentThreadId AttachConsole OutputDebugStringW WriteConsoleW GetFileType InterlockedIncrement GetTickCount SetThreadLocale GetCurrentProcess GetSystemDirectoryW OpenProcess CreateToolhelp32Snapshot Process32NextW GetUserDefaultLCID Process32FirstW LoadLibraryW GetCurrentProcessId GlobalMemoryStatusEx MultiByteToWideChar MoveFileExW WideCharToMultiByte ExitProcess SetFileTime UnmapViewOfFile GetFileAttributesExW CreateFileMappingA MapViewOfFile GetFileTime GetModuleFileNameA SetEndOfFile RaiseException CreateThread SetUnhandledExceptionFilter GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA GetStringTypeW EncodePointer DecodePointer GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwind LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetACP HeapFree HeapAlloc HeapReAlloc IsValidLocale EnumSystemLocalesW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA FreeEnvironmentStringsW GetProcessHeap SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize SetFilePointerEx ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

4ba7d93294a92ca6171b13de600d2c02957a07db5df574b70221169484666aa4

kernel32

generic