5e3c32a7af7d5523b752f896403cd0bf74c4a31119bedbdf91b9c82444c958be

General

Target
5e3c32a7af7d5523b752f896403cd0bf74c4a31119bedbdf91b9c82444c958be
Size 109KB
Sample261102-d22emagz2n
SHA256 5e3c32a7af7d5523b752f896403cd0bf74c4a31119bedbdf91b9c82444c958be
MD5 7dea46e5fe8415d7d383d8589849facb
SHA1 990da9628a4d8d563f0fa11ccb03075593090c99
SHA512 fcd176cc45dcb83f8160f7e6ac5f528dbb58dceaf4ca5835ed46dc9fe3957757b4e3e2a0a2bfeec93e50b621040d199c22ff2799773b2c32e59d1eafca9a7dba
SSDEEP 1536:gNDsrSpcF7AR2l4ZpgLu5S99YTI0gwKtLwX+1RkBWprXV8uarkryKmSvJ3TI0bWO:gFs4e+1iLWS99Y04M8XyTCrUp88W
TLSH
T175B37B03F696E0F8D09DC27183A79A23A3B9F4858A21735F13B48A116E65B747F1E3D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e3c32a7af7d5523b752f896403cd0bf74c4a31119bedbdf91b9c82444c958be

File Explorer

5e3c32a7af7d5523b752f896403cd0bf74c4a31119bedbdf91b9c82444c958be

.exe 109KB

5e3c32a7af7d5523b752f896403cd0bf74c4a31119bedbdf91b9c82444c958be

IMPHASH fa749e3193ee75e1bafe4b8fe6490320
SHA256 5e3c32a7af7d5523b752f896403cd0bf74c4a31119bedbdf91b9c82444c958be
MD5 7dea46e5fe8415d7d383d8589849facb
SHA1 990da9628a4d8d563f0fa11ccb03075593090c99
SHA512 fcd176cc45dcb83f8160f7e6ac5f528dbb58dceaf4ca5835ed46dc9fe3957757b4e3e2a0a2bfeec93e50b621040d199c22ff2799773b2c32e59d1eafca9a7dba
SSDEEP 1536:gNDsrSpcF7AR2l4ZpgLu5S99YTI0gwKtLwX+1RkBWprXV8uarkryKmSvJ3TI0bWO:gFs4e+1iLWS99Y04M8XyTCrUp88W
TLSH
T175B37B03F696E0F8D09DC27183A79A23A3B9F4858A21735F13B48A116E65B747F1E3D4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

81808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dog_agent_exe.pdb

kernel32

SetLastError GetProcAddress GetModuleHandleA HeapAlloc HeapFree IsProcessorFeaturePresent GetModuleHandleW WaitForSingleObject GetCurrentThreadId GetLastError VirtualQuery HeapReAlloc AddVectoredExceptionHandler GetProcessHeap MultiByteToWideChar GetCurrentThread SetThreadStackGuarantee GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStdHandle GetConsoleMode GetConsoleOutputCP WriteConsoleW QueryPerformanceCounter

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

ntdll

NtWriteFile RtlNtStatusToDosError

vcruntime140

__current_exception __current_exception_context __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

__p___argc _c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _register_onexit_function _exit _crt_atexit terminate __p___argv _seh_filter_exe _set_app_type _cexit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

5e3c32a7af7d5523b752f896403cd0bf74c4a31119bedbdf91b9c82444c958be

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic