fastspeed[.]exe | Triage™

General

Target
fastspeed.exe
Size 491KB
Sample260831-phfvcs1flh
SHA256 9574b67e909a3df2ab6a812c0851922640ecc49599dd576060a5931afd45516d
MD5 b5a4b2d2ef4e678ad27c2d1abf695e4a
SHA1 effb36f4746c7f73b01baf105b6b8686734754e7
SHA512 b196d1da1c43ca680a7c2f1fee960006328ac67f56b8c2a0846fd9d821bfb837543b9a6c4b944a33ea52dd9d707b6b06c385af63087e35c55461a7be16100b16
SSDEEP 12288:naIcWNcXIUU8Zva6or25Mu4RKk0SuvL/D/aCPHk:naJ/PP2iFvDDy4
TLSH
T19EB4F125F7D943F8D56AC57D89A04A02E63678127B50AAFF43B842530F636E08E7EF50
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fastspeed.exe

File Explorer

fastspeed.exe

.exe 491KB

fastspeed.exe

IMPHASH fea2e74bf086832f5bcf3a1cf5923cca
SHA256 9574b67e909a3df2ab6a812c0851922640ecc49599dd576060a5931afd45516d
MD5 b5a4b2d2ef4e678ad27c2d1abf695e4a
SHA1 effb36f4746c7f73b01baf105b6b8686734754e7
SHA512 b196d1da1c43ca680a7c2f1fee960006328ac67f56b8c2a0846fd9d821bfb837543b9a6c4b944a33ea52dd9d707b6b06c385af63087e35c55461a7be16100b16
SSDEEP 12288:naIcWNcXIUU8Zva6or25Mu4RKk0SuvL/D/aCPHk:naJ/PP2iFvDDy4
TLSH
T19EB4F125F7D943F8D56AC57D89A04A02E63678127B50AAFF43B842530F636E08E7EF50
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

41872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

woablyock.pdb

kernel32

GetModuleHandleA GetProcAddress GetProcessHeap HeapFree HeapAlloc CloseHandle LoadLibraryA TryAcquireSRWLockExclusive GetStdHandle GetConsoleMode WaitForSingleObject CreateFileW SetFileTime GetLastError SetLastError GetFullPathNameW SetFileInformationByHandle GetCurrentThread GetFileInformationByHandle GetFileInformationByHandleEx HeapReAlloc MultiByteToWideChar ReleaseSRWLockExclusive WriteConsoleW SetFilePointerEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW HeapSize FlushFileBuffers GetConsoleOutputCP WriteFile

ntdll

NtReadFile RtlGetVersion RtlNtStatusToDosError NtWriteFile

Sharing