projectr[.]dll | Triage™

General

Target
projectr.dll
Size 1.8MB
Sample220624-lpbx7secb7
SHA256 287055194e83ab2a8d91ef4d187de57345c19018cf3a85024c4fd20c64ad689e
MD5 546d975e638d044bc23c7f1bf4122d26
SHA1 2efd0d398b648d5c70db7d15b1893eb19519ae74
SHA512 7e4709e4dd18965966466334870488b4469e9920c5ae5bbc8bbd2249d2071744ba9c3d169be5d1d9280555465fc8659df4e7059a67f5ceca7f76dc8aa388a610
SSDEEP 24576:k/9rgUo+Az8Yy7YdKuiU/78yy1Po60N035p1GB9+5zvXFNY5G+w3JrQsrnsU132F:OgUo+JeUdwfSk4u2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

projectr.dll

.dll 1.8MB

projectr.dll

IMPHASH bc5a5f32b95a9bca825c469014d1df2d
SHA256 287055194e83ab2a8d91ef4d187de57345c19018cf3a85024c4fd20c64ad689e
MD5 546d975e638d044bc23c7f1bf4122d26
SHA1 2efd0d398b648d5c70db7d15b1893eb19519ae74
SHA512 7e4709e4dd18965966466334870488b4469e9920c5ae5bbc8bbd2249d2071744ba9c3d169be5d1d9280555465fc8659df4e7059a67f5ceca7f76dc8aa388a610
SSDEEP 24576:k/9rgUo+Az8Yy7YdKuiU/78yy1Po60N035p1GB9+5zvXFNY5G+w3JrQsrnsU132F:OgUo+JeUdwfSk4u2
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

49532

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetCurrentDirectoryA CreateFileA DeleteFileA FindClose FindFirstFileA FindNextFileA GetFileAttributesA SetFileTime WriteFile CloseHandle GetLastError HeapAlloc GetProcessHeap InitializeCriticalSection EnterCriticalSection LeaveCriticalSection WaitForSingleObject ExitProcess GetCurrentThreadId MapViewOfFile GetModuleFileNameA SwitchToFiber CreateFiber CreateFileMappingA GetComputerNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx InterlockedFlushSList SetLastError DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetCurrentProcess TerminateProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapFree GetStdHandle GetFileType GetStringTypeW GetACP GetTimeZoneInformation CompareStringW LCMapStringW FindFirstFileExA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetStdHandle RaiseException HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW CreateFileW

Name

.text

Size

117KB

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1014KB

Virtual Size

1014KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

655KB

Virtual Size

660KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

152B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

projectr.dll

kernel32