934d89fc455d9ab23920336462090bbf690771cd96b1ab48a1cf8cbab298e5d7

Sharing

Copy URL Twitter E-mail

General

Target
934d89fc455d9ab23920336462090bbf690771cd96b1ab48a1cf8cbab298e5d7
Size 193KB
Sample261102-e7bxlag19p
SHA256 934d89fc455d9ab23920336462090bbf690771cd96b1ab48a1cf8cbab298e5d7
MD5 202c97a7bd1589268014b2434db69415
SHA1 14cb66189866aecc5a6a26cf762bd0a5b157eee3
SHA512 70eb61f6695bba50d47b1298fb545aa828abf2d4c5c7ff1226aecb9ab8990e2733816212196bf955d7e12de6469948b9687039625dbb465e7e3564bd03b17ca0
SSDEEP 3072:bys5Mka/qcu7bfsWRw3E2IQ7tRiJzijiu/mQ4EJUdlIOm7ivkT8:+saq18ZN/mQ45dlI9ucT8
TLSH
T12E147B03E5A680F9D01EC67483679233E5B6F4898725736F17E44B21AE76F60BB0E784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
934d89fc455d9ab23920336462090bbf690771cd96b1ab48a1cf8cbab298e5d7

File Explorer

934d89fc455d9ab23920336462090bbf690771cd96b1ab48a1cf8cbab298e5d7

.exe 193KB

934d89fc455d9ab23920336462090bbf690771cd96b1ab48a1cf8cbab298e5d7

IMPHASH 77bb0853869299874b799c01a0bcd98a
SHA256 934d89fc455d9ab23920336462090bbf690771cd96b1ab48a1cf8cbab298e5d7
MD5 202c97a7bd1589268014b2434db69415
SHA1 14cb66189866aecc5a6a26cf762bd0a5b157eee3
SHA512 70eb61f6695bba50d47b1298fb545aa828abf2d4c5c7ff1226aecb9ab8990e2733816212196bf955d7e12de6469948b9687039625dbb465e7e3564bd03b17ca0
SSDEEP 3072:bys5Mka/qcu7bfsWRw3E2IQ7tRiJzijiu/mQ4EJUdlIOm7ivkT8:+saq18ZN/mQ45dlI9ucT8
TLSH
T12E147B03E5A680F9D01EC67483679233E5B6F4898725736F17E44B21AE76F60BB0E784
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

146208

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dog_agent_exe.pdb

kernel32

GetModuleHandleA CloseHandle CreateProcessW HeapReAlloc GetProcessHeap GetCurrentThread SetThreadStackGuarantee HeapAlloc AddVectoredExceptionHandler HeapFree GetCurrentThreadId GetProcAddress GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetModuleHandleW GetLastError VirtualQuery SetFilePointerEx ReadFile WaitForSingleObject CreatePipe MultiByteToWideChar SystemTimeToTzSpecificLocalTime SetLastError FileTimeToSystemTime WriteFile FindClose FindNextFileW FindFirstFileW GetFileSizeEx CreateFileW GetFileAttributesW GetConsoleOutputCP WriteConsoleW QueryPerformanceCounter GetConsoleMode GetStdHandle SetCurrentDirectoryW GetCurrentDirectoryW

winhttp

WinHttpSetOption WinHttpReadData WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpOpen WinHttpSendRequest WinHttpAddRequestHeaders WinHttpCloseHandle WinHttpSetStatusCallback WinHttpOpenRequest WinHttpConnect WinHttpReceiveResponse

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ntdll

RtlNtStatusToDosError NtWriteFile

vcruntime140

__current_exception_context __C_specific_handler __current_exception

api-ms-win-crt-runtime-l1-1-0

exit _initterm_e _initterm _exit _initialize_narrow_environment _configure_narrow_argv __p___argc _set_app_type _seh_filter_exe __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _register_onexit_function _crt_atexit terminate _get_initial_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

934d89fc455d9ab23920336462090bbf690771cd96b1ab48a1cf8cbab298e5d7

kernel32

winhttp

api-ms-win-core-synch-l1-2-0

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic