37a0fba1d11e70d18bf85520b764297036e182c89af0dd4bfa517ea627f9f843

General

Target

37a0fba1d11e70d18bf85520b764297036e182c89af0dd4bfa517ea627f9f843
Size

115KB
MD5

07cac8244a1e7085bb5f6b87af206e90
SHA1

74d7f57b0da5e26250b01c9a07f1af88af4dd728
SHA256

37a0fba1d11e70d18bf85520b764297036e182c89af0dd4bfa517ea627f9f843
SHA512

dff63c04e09a21d3fc7a1e95d6f9cdde5b40cda543d1f3f5c1659f51ac7af584ef25e403d2b5f22ed95f8906a811413763ea408b980dcd77b5ae5ba49cc88c5e
SSDEEP

1536:Tj2b20B0ZpdLB2aio1Dxnd+505DQ2mU0IexuPCmnZEHNIXBcR+JHTFxX:3M20iJ27c1Q50iRyNDZEHUtF

Score

N/A

Malware Config

Signatures

Files

37a0fba1d11e70d18bf85520b764297036e182c89af0dd4bfa517ea627f9f843
.exe windows x86

735dec0588ef672e554e945b181829f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
TraceEvent

kernel32

LocalFree
CompareStringW
GetCommandLineW
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset
?terminate@@YAXXZ

shell32

CommandLineToArgvW

netprojw

_NetworkProjectionThreadMain@12

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pttzypt
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

735dec0588ef672e554e945b181829f4

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

netprojw

Sections

.text Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 928B

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 28KB - Virtual size: 29KB

pttzypt Size: - Virtual size: 4KB

.text
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 928B

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 28KB - Virtual size: 29KB

pttzypt
Size: - Virtual size: 4KB