7cc5591b953f654eb1af2de3ca2bd7732222ed238ba035bc229168053bd4ee9c

Sharing

Copy URL Twitter E-mail

General

Target

7cc5591b953f654eb1af2de3ca2bd7732222ed238ba035bc229168053bd4ee9c
Size

217KB
MD5

774371a80a492ceff6958e58b10d8e70
SHA1

9f34a1bfb8ddef42252bfcc81f614d765f432be2
SHA256

7cc5591b953f654eb1af2de3ca2bd7732222ed238ba035bc229168053bd4ee9c
SHA512

23fd7f57758120cfbbbc6fa826d2258c4d521c91eae78d8ebe33f2de9e2f5f35830cdb161939f7c419a56ae5fbcea79b6aa395f18a7d1e04cc29c143ef3646fc
SSDEEP

6144:r51jJe1P3T5t6DJV/lV7Wx5R/QXB+P6cjGunLmaQVX+a:3jJsP3T5t6DJ5LaEXQPVGuL1QX

Score

N/A

Malware Config

Signatures

Files

7cc5591b953f654eb1af2de3ca2bd7732222ed238ba035bc229168053bd4ee9c
.exe windows x86

80115f9e414eca8538654e73098b9860

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
LockResource
SetUnhandledExceptionFilter
QueryPerformanceCounter
HeapFree
GetOEMCP
GetSystemDefaultLCID
lstrcpyA
QueryDosDeviceA
MultiByteToWideChar
WideCharToMultiByte
GetVolumeInformationA
LoadResource
GetProcessHeap
GetTickCount
SetLastError
LoadLibraryW
lstrcmpA
HeapAlloc
lstrlenA
GetSystemTimeAsFileTime
GetCurrentProcess
CloseHandle
GetEnvironmentStringsW
GetLocalTime
DeviceIoControl
FreeResource
GetUserDefaultLCID
SystemTimeToFileTime
FindResourceA
GetCurrentProcessId
CreateFileA

rasdlg

RasEntryDlgW
RasUserPrefsDlg
RasPhonebookDlgW
RouterEntryDlgA
RasSrvIsServiceRunning
RasSrvEnumConnections
RasSrvCleanupService
RasAutodialQueryDlgW
RasSrvHangupConnection
RasDialDlgW
DwTerminalDlg
RasUserGetManualDial
GetRasDialOutProtocols
RouterEntryDlgW
RasDialDlgA
RasUserEnableManualDial
RasSrvAddPropPages
RasEntryDlgA
RasSrvInitializeService
RasSrvIsConnectionConnected
RasAutodialQueryDlgA
RasPhonebookDlgA
RasSrvAllowConnectionsConfig

rasman

RasAddNotification
IsRasmanProcess
RasAddConnectionPort
RasAllocateRoute
RasActivateRouteEx

advapi32

RegQueryValueExW
RegOpenKeyExA
RegOpenKeyW
RegCloseKey
RegQueryValueExA

rasapi32

RasSetSubEntryPropertiesW
RasValidateEntryNameA
DwCloneEntry
RasValidateEntryNameW

rasctrs

CloseRasPerformanceData
CollectRasPerformanceData
OpenRasPerformanceData

raschap

RasEapGetInfo
RasCpEnumProtocolIds
RasCpGetInfo

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 23KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80115f9e414eca8538654e73098b9860

Headers

File Characteristics

Imports

kernel32

rasdlg

rasman

advapi32

rasapi32

rasctrs

raschap

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 23KB - Virtual size: 2.0MB

.edata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 23KB - Virtual size: 2.0MB

.edata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB