fastprox_eop[.]exe

General

Target
fastprox_eop.exe
Size 211KB
Sample261104-wdpp2aet5j
SHA256 f9ea32b935da9abb3e3819a1861a78ed5922e6664add29879ccefde20bf3581a
MD5 449fbfaf7dc6fbef7cf412e0bdd1c67d
SHA1 17f97e219ae9914b645b97e456636c0d1734c9ae
SHA512 a273d2cc608261f20f1c1c25b56876d74c27f88b0d4e0b8db42400defb66857ef1eddb804607431b32f278aadc9a338fb6b34bf9da92f55fd45535bc1b927d12
SSDEEP 3072:0A8wITVi4NRtUnwEY09dFeT4tpOZRrj6/UUrcmC9Jv9P2YndSbcN1L:0A8wITVi4Nb00+kAOfeamCJdqe1L
TLSH
T147248E15F7A518FAE267C578C9424A01EA737C424760EADF13904AB69F23BD09F3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fastprox_eop.exe

File Explorer

fastprox_eop.exe

.exe 211KB

fastprox_eop.exe

IMPHASH f626b94bcb75b984d9f0952826e57af8
SHA256 f9ea32b935da9abb3e3819a1861a78ed5922e6664add29879ccefde20bf3581a
MD5 449fbfaf7dc6fbef7cf412e0bdd1c67d
SHA1 17f97e219ae9914b645b97e456636c0d1734c9ae
SHA512 a273d2cc608261f20f1c1c25b56876d74c27f88b0d4e0b8db42400defb66857ef1eddb804607431b32f278aadc9a338fb6b34bf9da92f55fd45535bc1b927d12
SSDEEP 3072:0A8wITVi4NRtUnwEY09dFeT4tpOZRrj6/UUrcmC9Jv9P2YndSbcN1L:0A8wITVi4Nb00+kAOfeamCJdqe1L
TLSH
T147248E15F7A518FAE267C578C9424A01EA737C424760EADF13904AB69F23BD09F3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

37552

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ole32

GetHGlobalFromStream CoCreateInstance CoSetProxyBlanket CoInitializeSecurity CoMarshalInterface CoInitializeEx CoUninitialize CreateStreamOnHGlobal

oleaut32

SysAllocString VariantClear VariantInit SafeArrayUnaccessData SafeArrayAccessData SafeArrayDestroy SafeArrayCreate SysFreeString

kernel32

DeleteCriticalSection WriteConsoleW HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW CreateFileW DeleteFileW GetFileAttributesW GetFullPathNameW ReadFile GetTempPathW CloseHandle Sleep GetTickCount64 GetModuleHandleW GetProcAddress GlobalSize GlobalUnlock GlobalLock WideCharToMultiByte SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead MultiByteToWideChar RtlPcToFileHeader RaiseException RtlUnwindEx RtlLookupFunctionEntry GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo

Name

.text

Size

134KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

63KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

fastprox_eop.exe

ole32

oleaut32

kernel32

generic