a73eb7e7489ff9e3d2522b1006bb3d51abc3f0f3a33428d4c8d1a0f2ec44c3f6

Sharing

Copy URL Twitter E-mail

General

Target
a73eb7e7489ff9e3d2522b1006bb3d51abc3f0f3a33428d4c8d1a0f2ec44c3f6
Size 183KB
Sample261102-e5fg1asw3n
SHA256 a73eb7e7489ff9e3d2522b1006bb3d51abc3f0f3a33428d4c8d1a0f2ec44c3f6
MD5 a7926a5933c3731321cffbdf9ba144a4
SHA1 42c4401ebffa92c1347d5fe81b5c56e5f7584167
SHA512 ac6ec74c1e9ceac4caf5db6f4edbe4d667d9454fa64fc79b4e6d47f125e46f5bd7ad5cf7dc212efa3e95fc75a7d168f27828932f78c8116ae08140a1a44cda6e
SSDEEP 3072:T5mnELONEFB8DXgjulLLiOlu5lmhGygyvAEtMrE7y0VkuHk:9wEyqWFIygBEthuoku
TLSH
T121047D03F6A580F9D05EC17183669233E6B6F8898B21736F57E01B316E66FA0BB0D744
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a73eb7e7489ff9e3d2522b1006bb3d51abc3f0f3a33428d4c8d1a0f2ec44c3f6

File Explorer

a73eb7e7489ff9e3d2522b1006bb3d51abc3f0f3a33428d4c8d1a0f2ec44c3f6

.exe 183KB

a73eb7e7489ff9e3d2522b1006bb3d51abc3f0f3a33428d4c8d1a0f2ec44c3f6

IMPHASH 77bb0853869299874b799c01a0bcd98a
SHA256 a73eb7e7489ff9e3d2522b1006bb3d51abc3f0f3a33428d4c8d1a0f2ec44c3f6
MD5 a7926a5933c3731321cffbdf9ba144a4
SHA1 42c4401ebffa92c1347d5fe81b5c56e5f7584167
SHA512 ac6ec74c1e9ceac4caf5db6f4edbe4d667d9454fa64fc79b4e6d47f125e46f5bd7ad5cf7dc212efa3e95fc75a7d168f27828932f78c8116ae08140a1a44cda6e
SSDEEP 3072:T5mnELONEFB8DXgjulLLiOlu5lmhGygyvAEtMrE7y0VkuHk:9wEyqWFIygBEthuoku
TLSH
T121047D03F6A580F9D05EC17183669233E6B6F8898B21736F57E01B316E66FA0BB0D744
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

136368

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dog_agent_exe.pdb

kernel32

GetModuleHandleA CloseHandle CreateProcessW HeapReAlloc GetProcessHeap GetCurrentThread SetThreadStackGuarantee HeapAlloc AddVectoredExceptionHandler HeapFree GetCurrentThreadId GetProcAddress GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetModuleHandleW GetLastError VirtualQuery SetFilePointerEx ReadFile WaitForSingleObject CreatePipe MultiByteToWideChar SystemTimeToTzSpecificLocalTime SetLastError FileTimeToSystemTime WriteFile FindClose FindNextFileW FindFirstFileW GetFileSizeEx CreateFileW GetFileAttributesW GetConsoleOutputCP WriteConsoleW QueryPerformanceCounter GetConsoleMode GetStdHandle SetCurrentDirectoryW GetCurrentDirectoryW

winhttp

WinHttpSetOption WinHttpReadData WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpOpen WinHttpSendRequest WinHttpAddRequestHeaders WinHttpCloseHandle WinHttpSetStatusCallback WinHttpOpenRequest WinHttpConnect WinHttpReceiveResponse

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ntdll

RtlNtStatusToDosError NtWriteFile

vcruntime140

__current_exception_context __C_specific_handler __current_exception

api-ms-win-crt-runtime-l1-1-0

exit _initterm_e _initterm _exit _initialize_narrow_environment _configure_narrow_argv __p___argc _set_app_type _seh_filter_exe __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _register_onexit_function _crt_atexit terminate _get_initial_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

a73eb7e7489ff9e3d2522b1006bb3d51abc3f0f3a33428d4c8d1a0f2ec44c3f6

kernel32

winhttp

api-ms-win-core-synch-l1-2-0

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic