1df6c8d6e804ff45fac728d20739120c6137c96d1b2d705762690d413da7fe88

General

Target

1df6c8d6e804ff45fac728d20739120c6137c96d1b2d705762690d413da7fe88
Size

105KB
MD5

2b6184c9abf8b4ed33a874c918d419e0
SHA1

165bad6dc2e8fde3e25a65f22d867db08e3110c6
SHA256

1df6c8d6e804ff45fac728d20739120c6137c96d1b2d705762690d413da7fe88
SHA512

70d73068ae6ceb4dd493a57cf6d96713038770fdf45e15a638110f7739ba7e7467977d1a27ec85fedc70da54018d1122713ee1fc27daa5f4d9a8ff9ebf294dfc
SSDEEP

1536:pM+rb20B0ZpdLB2aio1Dxnd+505DQ2mU0IexuPCmnZEHEKBhpM+7ls:2A20iJ27c1Q50iRyNDZEHbBHM+7ls

Score

N/A

Malware Config

Signatures

Files

1df6c8d6e804ff45fac728d20739120c6137c96d1b2d705762690d413da7fe88
.exe windows x86

735dec0588ef672e554e945b181829f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
TraceEvent

kernel32

LocalFree
CompareStringW
GetCommandLineW
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset
?terminate@@YAXXZ

shell32

CommandLineToArgvW

netprojw

_NetworkProjectionThreadMain@12

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

735dec0588ef672e554e945b181829f4

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

netprojw

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 928B

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 18KB - Virtual size: 21KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 928B

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 18KB - Virtual size: 21KB