e1a5cc4ce9b054dc16be2abdc3793cf8bd022290342748b0b936b33d9ab20faa

Sharing

Copy URL Twitter E-mail

General

Target

e1a5cc4ce9b054dc16be2abdc3793cf8bd022290342748b0b936b33d9ab20faa
Size

211KB
MD5

66ef37f00e9d081ddcf6d4d862e62dc5
SHA1

4d39315b1ca0b807ecd2584b08311376a00bccdb
SHA256

e1a5cc4ce9b054dc16be2abdc3793cf8bd022290342748b0b936b33d9ab20faa
SHA512

1bf6ca80a556cde4a45b36f3b8a1fe2f1fb3a37a45400cd8a42771f29f07c42ef6aedbfd0d5fcf5213b6a19c0a84ae9d18322dd4ec509bbf663d0a44d8db9a75
SSDEEP

3072:wfScor+JLpBm4J0hZZ2GBUUlSIQsXb2kjfz9rso0m2afyugqFCCbZSuUtsooqI3R:A7UDh5zQsXbhlA9mDyd3LuUCooT2UkU

Score

N/A

Malware Config

Signatures

Files

e1a5cc4ce9b054dc16be2abdc3793cf8bd022290342748b0b936b33d9ab20faa
.exe windows x86

93813980d0c152322cfe4fcf026392ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasdlg

RouterEntryDlgW
GetRasDialOutProtocols
RasSrvAddPropPages
RasAutodialQueryDlgA
RasSrvInitializeService
RasEntryDlgA
RasPhonebookDlgW
RasSrvAllowConnectionsConfig
RasUserPrefsDlg
RasSrvIsConnectionConnected
RasSrvHangupConnection
RasUserEnableManualDial
RasAutodialQueryDlgW
RasDialDlgW
RasEntryDlgW
RasDialDlgA
RasSrvEnumConnections
RasSrvIsServiceRunning
RasUserGetManualDial
RasPhonebookDlgA
DwTerminalDlg
RasSrvCleanupService
RouterEntryDlgA

kernel32

MultiByteToWideChar
WideCharToMultiByte
LockResource
GetEnvironmentStringsW
FindResourceA
lstrcpyA
CreateFileA
LoadLibraryW
lstrcmpA
GetLocaleInfoW
HeapFree
GetSystemTimeAsFileTime
FreeResource
SystemTimeToFileTime
QueryDosDeviceA
LoadResource
GetVolumeInformationA
CloseHandle
HeapAlloc
GetSystemDefaultLCID
GetLocalTime
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcessId
lstrlenA
QueryPerformanceCounter
DeviceIoControl
GetTickCount
GetUserDefaultLCID
GetOEMCP
GetProcessHeap
GetCurrentProcess

advapi32

RegOpenKeyExA
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegQueryValueExA

rasctrs

CollectRasPerformanceData
OpenRasPerformanceData
CloseRasPerformanceData

raschap

RasCpEnumProtocolIds
RasCpGetInfo
RasEapGetInfo

rasapi32

RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW

rasman

IsRasmanProcess
RasActivateRouteEx
RasAddConnectionPort
RasAddNotification
RasAllocateRoute

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 18KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93813980d0c152322cfe4fcf026392ca

Headers

File Characteristics

Imports

rasdlg

kernel32

advapi32

rasctrs

raschap

rasapi32

rasman

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 18KB - Virtual size: 2.0MB

.edata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 18KB - Virtual size: 2.0MB

.edata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB