Net-Worm[.]Win32[.]Allaple[.]b-f4e129ef6c7b49a94419051090b947a18153d418be7889d49c43e35bbe65f022 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Net-Worm.Win32.Allaple.b-f4e129ef6c7b49a94419051090b947a18153d418be7889d49c43e35bbe65f022
Size

119KB
MD5

90b0bbe0eaa4e95448b57466e240b649
SHA1

3650dfbfc7b8abb73d336c0a158ac0cfe3b6d8c6
SHA256

f4e129ef6c7b49a94419051090b947a18153d418be7889d49c43e35bbe65f022
SHA512

c34f0676b3e8996694905e0537a08911ba4aaf9c0ef9e7183588e6df9f68e3be5ccc747dad912e8762b5d184abd2580fe4d34d393946044bc12d1f5790101715
SSDEEP

3072:0Xf80Nr6pba9pL9qQFqeXzuSuNUM2zf0E+XPkGFX+JEAE9:0Xf3Nr65MpL1XzuBIcE+XdFIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Net-Worm.Win32.Allaple.b-f4e129ef6c7b49a94419051090b947a18153d418be7889d49c43e35bbe65f022

Files

Net-Worm.Win32.Allaple.b-f4e129ef6c7b49a94419051090b947a18153d418be7889d49c43e35bbe65f022
.exe windows:4 windows x86 arch:x86

f3bc037d9d00773f22fdb01050f0779a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32NextW
OpenWaitableTimerW
GetTapeStatus
CancelIoEx
ExitProcess
GetDllDirectoryA
SetThreadpoolStackInformation
WaitForThreadpoolTimerCallbacks
SetUnhandledExceptionFilter
GetQueuedCompletionStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE