agha25[.]tar | Triage™

General

Target
agha25.tar
Size 538KB
Sample251016-msbx2ses7c
SHA256 3f1ada78b282636a9edbac8f7fef7fe53e2ed62b2b732aed16e9ecfcb5cc04c7
MD5 04485fad82d561bffe7e83dd47d81d7f
SHA1 133e7eb3593afb3f05e1c1f72f525c10a237dcb6
SHA512 6d8fadc784c8d975dee3b87b1e8ba301ca2107b5452f772083d3f6845a274d79b5c773409180f89e51bea860e75df9886ae4a07b88480cd3fb6d14ebd57c97a6
SSDEEP 6144:mxbDGn5U0EV3GbQM/UOq+ZbFN5LFv1ZW7F37RWCFACc3Np/BhII3CqrrV1aNGHBB:82C06YQCpZlB8sCwPrCN8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
agha25.tar

File Explorer

agha25.tar

.dll 538KB

agha25.tar

IMPHASH 3c45c2eae973252af425589125584d7a
SHA256 3f1ada78b282636a9edbac8f7fef7fe53e2ed62b2b732aed16e9ecfcb5cc04c7
MD5 04485fad82d561bffe7e83dd47d81d7f
SHA1 133e7eb3593afb3f05e1c1f72f525c10a237dcb6
SHA512 6d8fadc784c8d975dee3b87b1e8ba301ca2107b5452f772083d3f6845a274d79b5c773409180f89e51bea860e75df9886ae4a07b88480cd3fb6d14ebd57c97a6
SSDEEP 6144:mxbDGn5U0EV3GbQM/UOq+ZbFN5LFv1ZW7F37RWCFACc3Np/BhII3CqrrV1aNGHBB:82C06YQCpZlB8sCwPrCN8
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

267553

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\LotMiss\wavedog\FarFood\Strong.pdb

user32

CreateWindowExA SetMenuItemInfoA GetMenu SetWindowLongA IsWindow SetScrollInfo LoadIconA GetSysColor CallWindowProcA

ole32

CoCreateInstance CoUninitialize CoInitialize CoTaskMemFree CoTaskMemAlloc

kernel32

InterlockedIncrement CompareStringW CompareStringA GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA InitializeCriticalSectionAndSpinCount WaitForSingleObject LoadLibraryA TlsGetValue TlsAlloc VirtualProtect Sleep GetEnvironmentVariableA GetSystemDirectoryA HeapSize IsValidCodePage GetOEMCP GetACP GetSystemTimeAsFileTime RaiseException RtlUnwind GetCurrentThreadId GetCommandLineA HeapAlloc GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WideCharToMultiByte GetTimeZoneInformation GetModuleHandleW GetProcAddress TlsSetValue TlsFree SetEnvironmentVariableA SetLastError InterlockedDecrement ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc WriteFile GetCPInfo

dhcpcsvc

DhcpRegisterParamChange DhcpDeRegisterParamChange DhcpCApiInitialize DhcpCApiCleanup DhcpRemoveDNSRegistrations DhcpRequestParams

Sharing