ProjectorMain
Static task
static1
Behavioral task
behavioral1
Sample
433866b88b1f76edeab55fbe7013fc483833d1f1fc2db52744295135a5111b76.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
433866b88b1f76edeab55fbe7013fc483833d1f1fc2db52744295135a5111b76.dll
Resource
win10v2004-20240426-en
General
-
Target
433866b88b1f76edeab55fbe7013fc483833d1f1fc2db52744295135a5111b76
-
Size
2.5MB
-
MD5
e15739b169b1d49d26e96c67bc2ac887
-
SHA1
7fa682a2b2d89150e465ab34aea15ad667e5b021
-
SHA256
433866b88b1f76edeab55fbe7013fc483833d1f1fc2db52744295135a5111b76
-
SHA512
6ee67834de1f326938eaf20853ab8525420c93dc6d529d893a5cf9441038ee65a47b0ca47f6ba81b9a1a6262008e7cec945254056035b7149ae05614244f9a2b
-
SSDEEP
49152:Cm2R2Mn+sfsIKrlRTp7kJj70wu993pMVBjRcq:Cm2R9fB0Fopu6BjRcq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 433866b88b1f76edeab55fbe7013fc483833d1f1fc2db52744295135a5111b76
Files
-
433866b88b1f76edeab55fbe7013fc483833d1f1fc2db52744295135a5111b76.dll windows:4 windows x86 arch:x86
f506e9039519ce6709545e3ddfdcbbfd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
FindClose
GetModuleHandleA
FindFirstFileA
GetPrivateProfileStringA
Sleep
GetShortPathNameA
_lopen
GetTempPathA
lstrlenA
CreateFileA
RemoveDirectoryA
CreateDirectoryA
_lclose
_lread
_llseek
OpenFile
FreeLibrary
LoadLibraryA
_lcreat
GetTempFileNameA
_lwrite
DeleteFileA
FindNextFileA
SetErrorMode
GetSystemDirectoryA
CloseHandle
user32
RegisterClassA
CreateWindowExA
WaitMessage
FindWindowA
CallWindowProcA
MoveWindow
SetWindowTextA
GetClassInfoA
GetWindowRect
SetWindowPos
LoadIconA
MessageBoxA
DestroyWindow
SetForegroundWindow
SetFocus
GetDC
ReleaseDC
PostMessageA
DefWindowProcA
GetKeyState
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
GetParent
ShowWindow
DrawTextA
IsDlgButtonChecked
DialogBoxParamA
EndDialog
GetDlgItem
SendMessageA
GetWindowTextLengthA
gdi32
RealizePalette
CreatePalette
GetDeviceCaps
SelectPalette
GetStockObject
SelectObject
DeleteObject
msvcrt
strncpy
memset
strcpy
_makepath
_splitpath
_initterm
atol
strlen
malloc
_adjust_fdiv
free
__dllonexit
_onexit
_chdir
_EH_prolog
__CxxFrameHandler
strcmp
strcat
??3@YAXPAX@Z
??2@YAPAXI@Z
strtol
sprintf
iml32
ord1832
ord1501
ord1811
ord1502
ord1200
ord1068
ord1540
ord1800
ord1163
ord1407
ord1020
ord1415
ord1419
ord1432
ord1402
ord1113
ord1152
ord1150
ord1309
ord1129
ord1115
ord1429
ord1114
ord1431
ord1420
ord1130
ord1111
ord1404
ord1416
ord1412
ord1418
ord1414
ord1116
ord1317
ord1517
ord1204
ord1201
ord1314
ord1318
ord1310
ord1316
ord1780
ord1764
ord1763
ord1202
ord1232
ord1865
ord1029
ord1028
ord1112
ord1733
ord1653
ord1802
ord1601
ord1541
ord1826
ord1836
ord1609
ord1604
ord1600
ord2215
ord1810
ord1064
ord2031
ord1060
ord1656
ord1351
ord1320
ord1127
ord1815
ord1848
ord1841
ord1751
ord1132
ord1154
ord1155
ord1010
ord1011
ord1801
ord1300
ord1160
ord1013
ord1018
ord1812
ord1308
ord1128
ord1500
ord1219
ord1319
ord1215
ord1655
ord1654
ord1350
ord1126
ord2075
ord1357
ord1352
ord1356
ord1813
ord1216
ord2043
ord2042
ord1661
dirapi
ord45
ord59
ord1110
ord500
ord557
ord558
ord38
ord35
ord39
ord37
ord36
ord85
ord83
ord81
ord96
ord88
ord89
ord90
ord47
ord95
ord54
ord98
ord78
ord11
ord118
ord68
ord67
ord93
ord63
ord91
ord46
ord94
ord52
ord161
ord53
ord86
ord87
ord92
ord84
ord80
ord82
ord48
ord109
ord14
ord12
ord17
ord16
ord10
ord18
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
Exports
Exports
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ