Static task
static1
Behavioral task
behavioral1
Sample
NetProj.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NetProj.exe
Resource
win10v2004-20231020-en
General
-
Target
NetProj.exe
-
Size
88KB
-
MD5
81fd5569186ea40644e40e726f2f7ef1
-
SHA1
9aa171d4a4644c8a9cc09adf4bd382e663a7678e
-
SHA256
f1d8c4b4f03de8233aa4fcae76bd00536a46e64c819587ab86c426487abfcc6f
-
SHA512
e5eae5d700839ea58792805c3fafc2329b0b290a88b048ed3ab10e343daf78f825ad23d23a4d1fb858faed1f9c9e3dcfef327857a4f5e6555e00af8df25af376
-
SSDEEP
1536:RV2b20B0ZpdLB2aio1Dxnd+505DQ2mU0IexuPCmnZEH:HM20iJ27c1Q50iRyNDZEH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NetProj.exe
Files
-
NetProj.exe.exe windows:6 windows x86
735dec0588ef672e554e945b181829f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
TraceEvent
kernel32
LocalFree
CompareStringW
GetCommandLineW
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
msvcrt
_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset
?terminate@@YAXXZ
shell32
CommandLineToArgvW
netprojw
_NetworkProjectionThreadMain@12
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ