0e933bf9e363f718d92a1e8e7aa85b379420f916c2a827c0956a7a2462b4e06d

General

Target

0e933bf9e363f718d92a1e8e7aa85b379420f916c2a827c0956a7a2462b4e06d
Size

105KB
MD5

12434588ed844875509df6b064dab550
SHA1

12c33b33c2aa266b29ad239c6941d349d0ff96d9
SHA256

0e933bf9e363f718d92a1e8e7aa85b379420f916c2a827c0956a7a2462b4e06d
SHA512

7c22f14680b39464055a7e3d730ff0a0f92c9dbdf95b778abfc82a46e357297e773665b2dbe6f166c35570be906ff8555bcdf61720ddf0d4c5a7023c89117363
SSDEEP

1536:p6+Kb20B0ZpdLB2aio1Dxnd+505DQ2mU0IexuPCmnZEHiIR8BVpQoN:Iv20iJ27c1Q50iRyNDZEHixPQO

Score

N/A

Malware Config

Signatures

Files

0e933bf9e363f718d92a1e8e7aa85b379420f916c2a827c0956a7a2462b4e06d
.exe windows x86

735dec0588ef672e554e945b181829f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
TraceEvent

kernel32

LocalFree
CompareStringW
GetCommandLineW
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset
?terminate@@YAXXZ

shell32

CommandLineToArgvW

netprojw

_NetworkProjectionThreadMain@12

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

735dec0588ef672e554e945b181829f4

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

netprojw

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 928B

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 18KB - Virtual size: 21KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 928B

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 18KB - Virtual size: 21KB