Net-Worm[.]Win32[.]Allaple[.]b-0bb6f237480d6b10cee2fa077df041bf76e7840dc1e2c7b8ea802efa61785c32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Net-Worm.Win32.Allaple.b-0bb6f237480d6b10cee2fa077df041bf76e7840dc1e2c7b8ea802efa61785c32
Size

119KB
MD5

53b2d0e6d38804db2cb685dfb8294699
SHA1

934b0c16ec4eb1846df8396940c170c52e8b59db
SHA256

0bb6f237480d6b10cee2fa077df041bf76e7840dc1e2c7b8ea802efa61785c32
SHA512

43fda6af4caf156ffb9c6904269978491f9cc048f5e93749e73feec35063ba3716d0e86bfefde4d77d32faffb620a0c1c87b2d114ef0f8a56104f2285bbd3425
SSDEEP

3072:V60KDOXTxgJePP7yPKyonNueE4UOM+uxy+nrrEL6KW:V8/JqWPXoNueNGxy+nrrEL6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Net-Worm.Win32.Allaple.b-0bb6f237480d6b10cee2fa077df041bf76e7840dc1e2c7b8ea802efa61785c32

Files

Net-Worm.Win32.Allaple.b-0bb6f237480d6b10cee2fa077df041bf76e7840dc1e2c7b8ea802efa61785c32
.exe windows:4 windows x86 arch:x86

4971f5f0e633d914d1931dda92824438

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CheckTokenMembershipEx
RegOpenUserClassesRoot
SetLocaleInfoA
SetConsoleMenuClose
PssCaptureSnapshot
GetLongPathNameW
ReleaseSemaphoreWhenCallbackReturns
GetNumaNodeProcessorMask
SetConsoleActiveScreenBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE