d5292f12846c1b2eda0a0284ab2934828d2e9c317b64a2fec8f4c374304c2eac

General

Target

d5292f12846c1b2eda0a0284ab2934828d2e9c317b64a2fec8f4c374304c2eac
Size

209KB
MD5

72c08c74a06ccf99df189fb532002e3e
SHA1

caefeef827cd6cbe08c4a07a0c1852719917dd25
SHA256

d5292f12846c1b2eda0a0284ab2934828d2e9c317b64a2fec8f4c374304c2eac
SHA512

2fa639501515256e26218356615727c3ab762f707e0387b5a275f58109e514956a6bc43ff5f4696799dbe7b02b8a22292c0d5cd813bcaf77985e4a9c6167011d
SSDEEP

3072:nPAbXPyC8+H0sfBS7QsKSrpxdYvqsSiD7cYV96RSvlUr53lH58WaKiuXfi8PeA+p:IXPbhHFpSp/9xdY9Siv96YvlUBl/zCyw

Score

N/A

Malware Config

Signatures

Files

d5292f12846c1b2eda0a0284ab2934828d2e9c317b64a2fec8f4c374304c2eac
.exe windows x86

06ba45096e234d3614a93dd22606d68e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
LockResource
CloseHandle
WideCharToMultiByte
QueryDosDeviceA
SetLastError
FindResourceA
SystemTimeToFileTime
GetEnvironmentStringsW
GetTickCount
QueryPerformanceCounter
HeapAlloc
GetSystemTimeAsFileTime
CreateFileA
lstrcpyA
GetOEMCP
GetLocaleInfoW
GetLocalTime
GetVolumeInformationA
lstrlenA
LoadLibraryW
GetCurrentProcess
lstrcmpA
MultiByteToWideChar
HeapFree
DeviceIoControl
GetProcessHeap
LoadResource
SetUnhandledExceptionFilter
FreeResource

rasman

RasActivateRouteEx
RasAddConnectionPort
RasAllocateRoute
RasAddNotification
IsRasmanProcess

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyW
RegQueryValueExA
RegOpenKeyExA

rasapi32

DwCloneEntry
RasValidateEntryNameA
RasSetSubEntryPropertiesW
RasValidateEntryNameW

raschap

RasCpGetInfo
RasEapGetInfo
RasCpEnumProtocolIds

rasctrs

OpenRasPerformanceData
CloseRasPerformanceData
CollectRasPerformanceData

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 17KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06ba45096e234d3614a93dd22606d68e

Headers

File Characteristics

Imports

kernel32

rasman

advapi32

rasapi32

raschap

rasctrs

Sections

.text Size: 102KB - Virtual size: 101KB

.rdata Size: 72KB - Virtual size: 71KB

.hdata Size: 17KB - Virtual size: 165KB

.cdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 102KB - Virtual size: 101KB

.rdata
Size: 72KB - Virtual size: 71KB

.hdata
Size: 17KB - Virtual size: 165KB

.cdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB