b4d4d43a47e4e4a0d3893d631ec22de079f542a65b7b3934f4921ac18787fa10

General

Target

b4d4d43a47e4e4a0d3893d631ec22de079f542a65b7b3934f4921ac18787fa10
Size

115KB
MD5

6994dfda680caa7f9dce91eb88100881
SHA1

0558fc968323a8a66ff74cf16a8003881eb3661e
SHA256

b4d4d43a47e4e4a0d3893d631ec22de079f542a65b7b3934f4921ac18787fa10
SHA512

f3088f6dbb99cce9990b50370426b9564df6975dc97eb972a7ec6e79325b7a5ae9e6c333c6ee941a09790c3b39a0dab9aeb4179b44df1d67661d83960ddcde25
SSDEEP

1536:NV2b20B0ZpdLB2aio1Dxnd+505DQ2mU0IexuPCmnZEHO7Y/9P18qupdmvFg:LM20iJ27c1Q50iRyNDZEHO7Yh188

Score

N/A

Malware Config

Signatures

Files

b4d4d43a47e4e4a0d3893d631ec22de079f542a65b7b3934f4921ac18787fa10
.exe windows x86

735dec0588ef672e554e945b181829f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
TraceEvent

kernel32

LocalFree
CompareStringW
GetCommandLineW
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset
?terminate@@YAXXZ

shell32

CommandLineToArgvW

netprojw

_NetworkProjectionThreadMain@12

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vesxfsw
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

735dec0588ef672e554e945b181829f4

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

netprojw

Sections

.text Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 928B

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 28KB - Virtual size: 29KB

vesxfsw Size: - Virtual size: 4KB

.text
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 928B

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 28KB - Virtual size: 29KB

vesxfsw
Size: - Virtual size: 4KB