b9020878af998a3326b85aaf01b9f1b3d85450efb1dc005939703fbc833cb5af

General

Target

b9020878af998a3326b85aaf01b9f1b3d85450efb1dc005939703fbc833cb5af
Size

105KB
MD5

6bfbcfdf8680686daf408998f697ddc0
SHA1

2213e2a20339b4053c2cda401a83c21fbd917877
SHA256

b9020878af998a3326b85aaf01b9f1b3d85450efb1dc005939703fbc833cb5af
SHA512

bb282a906eb389a81bae56d908d186b2fc823168f8f9b12f74c7575f8f46c142549651ebbcf969b31c43f7748d4bce4c792f8dc2bcf93735ebf57ebe0ef73632
SSDEEP

1536:vvEUb20B0ZpdLB2aio1Dxnd+505DQ2mU0IexuPCmnZEHhoEny0MjaPBpB:nH20iJ27c1Q50iRyNDZEHWEy1e

Score

N/A

Malware Config

Signatures

Files

b9020878af998a3326b85aaf01b9f1b3d85450efb1dc005939703fbc833cb5af
.exe windows x86

735dec0588ef672e554e945b181829f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
TraceEvent

kernel32

LocalFree
CompareStringW
GetCommandLineW
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset
?terminate@@YAXXZ

shell32

CommandLineToArgvW

netprojw

_NetworkProjectionThreadMain@12

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

735dec0588ef672e554e945b181829f4

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

netprojw

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 928B

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 18KB - Virtual size: 21KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 928B

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 18KB - Virtual size: 21KB