Net-Worm[.]Win32[.]Allaple[.]b-893aa9cf2f843afc1407899a9c4fc97b04fb5a5f8c01bc0a9888b8082a4b9d05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Net-Worm.Win32.Allaple.b-893aa9cf2f843afc1407899a9c4fc97b04fb5a5f8c01bc0a9888b8082a4b9d05
Size

119KB
MD5

94703353f26e952f18909abe93b8924b
SHA1

5e32abd35d28076360842f501d1726db97714679
SHA256

893aa9cf2f843afc1407899a9c4fc97b04fb5a5f8c01bc0a9888b8082a4b9d05
SHA512

062e6f681e8f44e21d078b54cef217e84d27a1734b0d7b32eabec33ffc9b628ae06f56baed8b81dfba7e511b258fb7ed0b59c032d46d197df30cfe315d2da367
SSDEEP

3072:ATgY9UhRsNIzyIw9tZcNudMDY0iKEmI+QwR/CmL/h+WhN:AKhRMRvtZcsmY0gwd3LXN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Net-Worm.Win32.Allaple.b-893aa9cf2f843afc1407899a9c4fc97b04fb5a5f8c01bc0a9888b8082a4b9d05

Files

Net-Worm.Win32.Allaple.b-893aa9cf2f843afc1407899a9c4fc97b04fb5a5f8c01bc0a9888b8082a4b9d05
.exe windows:4 windows x86 arch:x86

fc98d5cc21681428dec27fcabc23e1d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
CreateEventExW
GetCachedSigningLevel
LZOpenFileW
CreateFileA
BaseInitAppcompatCacheSupport
CompareStringEx
GetThreadIOPendingFlag
QuirkIsEnabledForPackage4Worker
CloseThreadpoolWork

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE