Net-Worm[.]Win32[.]Allaple[.]b-3e206d76b52f8595b0912c8304bddc29a117d523cc93aa1e900b00b8b755c0bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Net-Worm.Win32.Allaple.b-3e206d76b52f8595b0912c8304bddc29a117d523cc93aa1e900b00b8b755c0bf
Size

119KB
MD5

7a5cb62e2d8fc6944774b53b05a537a1
SHA1

20025ef22ab04455cb084d62f8a1af074227ecac
SHA256

3e206d76b52f8595b0912c8304bddc29a117d523cc93aa1e900b00b8b755c0bf
SHA512

de1fa607826fa3f5dcf71abc4448a1f7ce9a993c83d56f876429e1af8dacc0539759477d2f05fece7d5fca08399354b56eb6ea4939b875159b619ca62c203146
SSDEEP

3072:crB+legcHvr+vyRrP9W8JGKIH/9zTyJCdsvj:c2egc6yJ91KlzT6L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Net-Worm.Win32.Allaple.b-3e206d76b52f8595b0912c8304bddc29a117d523cc93aa1e900b00b8b755c0bf

Files

Net-Worm.Win32.Allaple.b-3e206d76b52f8595b0912c8304bddc29a117d523cc93aa1e900b00b8b755c0bf
.exe windows:4 windows x86 arch:x86

14d1f317f4c25b9ba8709e6f3673a8b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
SetFileShortNameA
HeapDestroy
GetSystemDirectoryW
RegOpenKeyExA
ReadConsoleW
IsProcessorFeaturePresent
BackupWrite
FormatMessageA
SetThreadInformation
PssQuerySnapshot

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE