5f3aad455f6c053743a4fd67a0c3095efbda55ae95dfffea06bae4f23ad746a8

General

Target
5f3aad455f6c053743a4fd67a0c3095efbda55ae95dfffea06bae4f23ad746a8
Size 4.8MB
Sample261017-n23b2aew2m
SHA256 5f3aad455f6c053743a4fd67a0c3095efbda55ae95dfffea06bae4f23ad746a8
MD5 1ddc30b1ac4e96d0bec24edb5d5193ba
SHA1 0d6f5f72dba3b926ef596c66554e47c8b8d6ede0
SHA512 23b868edf2329caccec991ed8fc3aab315b53f85b18539b6be7e71afb9975d02d73819438dcce751673ed43902e9b3336bd3674fdb94be574c24efa3222de40f
SSDEEP 98304:IAmQ4+hgMoPgx/YaCeh0UEvW2e9VMUeExzjvWhYrzuk93jL9Mm:/o4xxNZEvWlJxz71nhFMm
TLSH
T1533623417BE2C1B2F5B345714DB9AA3A563CB9100B3588E7E3E5063D9E349C12B31BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f3aad455f6c053743a4fd67a0c3095efbda55ae95dfffea06bae4f23ad746a8

File Explorer

5f3aad455f6c053743a4fd67a0c3095efbda55ae95dfffea06bae4f23ad746a8

.exe 4.8MB

5f3aad455f6c053743a4fd67a0c3095efbda55ae95dfffea06bae4f23ad746a8

IMPHASH d91e9b8add19a7c1b3b0df96bafc4983
SHA256 5f3aad455f6c053743a4fd67a0c3095efbda55ae95dfffea06bae4f23ad746a8
MD5 1ddc30b1ac4e96d0bec24edb5d5193ba
SHA1 0d6f5f72dba3b926ef596c66554e47c8b8d6ede0
SHA512 23b868edf2329caccec991ed8fc3aab315b53f85b18539b6be7e71afb9975d02d73819438dcce751673ed43902e9b3336bd3674fdb94be574c24efa3222de40f
SSDEEP 98304:IAmQ4+hgMoPgx/YaCeh0UEvW2e9VMUeExzjvWhYrzuk93jL9Mm:/o4xxNZEvWlJxz71nhFMm
TLSH
T1533623417BE2C1B2F5B345714DB9AA3A563CB9100B3588E7E3E5063D9E349C12B31BE9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

249035

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\FastCopy\src\install\Obj\ReleaseInst\setup.pdb

kernel32

ReadFile FindFirstFileW FindNextFileW WriteFile FindClose WaitForSingleObject CreateFileW DeleteFileW CloseHandle GetLocalTime GetFileSize GetSystemTimeAsFileTime CreateDirectoryW GetCommandLineW GetFullPathNameW RemoveDirectoryW GetModuleFileNameW GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW GetProcAddress CreateProcessW FreeLibrary CopyFileW SetDllDirectoryW MoveFileW GetEnvironmentVariableW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetTempPathW Sleep GetLastError SetEvent GetVersionExA DeleteCriticalSection GetModuleHandleW GetEnvironmentStringsW IsDebuggerPresent SetLastError GetStdHandle WriteConsoleA OutputDebugStringA GetCurrentThreadId AttachConsole OutputDebugStringW WriteConsoleW GetFileType InterlockedIncrement GetTickCount SetThreadLocale GetCurrentProcess GetSystemDirectoryW OpenProcess CreateToolhelp32Snapshot Process32NextW GetUserDefaultLCID Process32FirstW LoadLibraryW GetCurrentProcessId GlobalMemoryStatusEx MultiByteToWideChar MoveFileExW WideCharToMultiByte ExitProcess SetFileTime UnmapViewOfFile GetFileAttributesExW CreateFileMappingA MapViewOfFile GetFileTime GetModuleFileNameA SetEndOfFile RaiseException CreateThread SetUnhandledExceptionFilter GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA GetStringTypeW EncodePointer DecodePointer GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwind LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetACP HeapFree HeapAlloc HeapReAlloc IsValidLocale EnumSystemLocalesW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA FreeEnvironmentStringsW GetProcessHeap SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize SetFilePointerEx ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

5f3aad455f6c053743a4fd67a0c3095efbda55ae95dfffea06bae4f23ad746a8

kernel32

generic