69898e8b6acf1d86b25931f8d37d825aff62e992fca078f1f549f2bbd6656c82

General

Target

69898e8b6acf1d86b25931f8d37d825aff62e992fca078f1f549f2bbd6656c82
Size

209KB
MD5

6c11377707ef6a5989c7883c9cb87370
SHA1

9e375c2cb70b47cea0886f7d414a42f07d09180b
SHA256

69898e8b6acf1d86b25931f8d37d825aff62e992fca078f1f549f2bbd6656c82
SHA512

627bff4b9471285466e990b3c78ce154007ee7c6cc4193e99cb3dd641185fc8b9307e73f39c8f433df8f76c8fa948a2eebb6f2cdfebc42389cfe191bb404c15e
SSDEEP

3072:nPAbXPyC8+H0sfBS7QsKSrpxdYvqsSiD7cYV96RSvlUr53lH58WaKiuXfi8PeA+J:IXPbhHFpSp/9xdY9Siv96YvlUBl/zCH

Score

N/A

Malware Config

Signatures

Files

69898e8b6acf1d86b25931f8d37d825aff62e992fca078f1f549f2bbd6656c82
.exe windows x86

06ba45096e234d3614a93dd22606d68e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
LockResource
CloseHandle
WideCharToMultiByte
QueryDosDeviceA
SetLastError
FindResourceA
SystemTimeToFileTime
GetEnvironmentStringsW
GetTickCount
QueryPerformanceCounter
HeapAlloc
GetSystemTimeAsFileTime
CreateFileA
lstrcpyA
GetOEMCP
GetLocaleInfoW
GetLocalTime
GetVolumeInformationA
lstrlenA
LoadLibraryW
GetCurrentProcess
lstrcmpA
MultiByteToWideChar
HeapFree
DeviceIoControl
GetProcessHeap
LoadResource
SetUnhandledExceptionFilter
FreeResource

rasman

RasActivateRouteEx
RasAddConnectionPort
RasAllocateRoute
RasAddNotification
IsRasmanProcess

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyW
RegQueryValueExA
RegOpenKeyExA

rasapi32

DwCloneEntry
RasValidateEntryNameA
RasSetSubEntryPropertiesW
RasValidateEntryNameW

raschap

RasCpGetInfo
RasEapGetInfo
RasCpEnumProtocolIds

rasctrs

OpenRasPerformanceData
CloseRasPerformanceData
CollectRasPerformanceData

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 17KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06ba45096e234d3614a93dd22606d68e

Headers

File Characteristics

Imports

kernel32

rasman

advapi32

rasapi32

raschap

rasctrs

Sections

.text Size: 102KB - Virtual size: 101KB

.rdata Size: 72KB - Virtual size: 71KB

.hdata Size: 17KB - Virtual size: 165KB

.cdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 102KB - Virtual size: 101KB

.rdata
Size: 72KB - Virtual size: 71KB

.hdata
Size: 17KB - Virtual size: 165KB

.cdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB