1bc5f4d07e9266477c1dd5092f42ca2f770dca718426a409bc5a00112dc209f9

Sharing

Copy URL Twitter E-mail

General

Target

1bc5f4d07e9266477c1dd5092f42ca2f770dca718426a409bc5a00112dc209f9
Size

217KB
MD5

4d5a4174aa9636c910f3c25d9881d711
SHA1

cdf9515127bb5ca12b43088fa57b6f3e104a41f2
SHA256

1bc5f4d07e9266477c1dd5092f42ca2f770dca718426a409bc5a00112dc209f9
SHA512

99a59737d170962493ea791078a6aeaca4e20efc923f6b0e05d2531183874540876487071458df7edacccab0c6b265db82fa77ab9297d5f805fdd07da23e74d2
SSDEEP

6144:r51jJe1P3T5t6DJV/lV7Wx5R/QXB+P6cjGunLmaQVX+g:3jJsP3T5t6DJ5LaEXQPVGuL1Qp

Score

N/A

Malware Config

Signatures

Files

1bc5f4d07e9266477c1dd5092f42ca2f770dca718426a409bc5a00112dc209f9
.exe windows x86

80115f9e414eca8538654e73098b9860

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
LockResource
SetUnhandledExceptionFilter
QueryPerformanceCounter
HeapFree
GetOEMCP
GetSystemDefaultLCID
lstrcpyA
QueryDosDeviceA
MultiByteToWideChar
WideCharToMultiByte
GetVolumeInformationA
LoadResource
GetProcessHeap
GetTickCount
SetLastError
LoadLibraryW
lstrcmpA
HeapAlloc
lstrlenA
GetSystemTimeAsFileTime
GetCurrentProcess
CloseHandle
GetEnvironmentStringsW
GetLocalTime
DeviceIoControl
FreeResource
GetUserDefaultLCID
SystemTimeToFileTime
FindResourceA
GetCurrentProcessId
CreateFileA

rasdlg

RasEntryDlgW
RasUserPrefsDlg
RasPhonebookDlgW
RouterEntryDlgA
RasSrvIsServiceRunning
RasSrvEnumConnections
RasSrvCleanupService
RasAutodialQueryDlgW
RasSrvHangupConnection
RasDialDlgW
DwTerminalDlg
RasUserGetManualDial
GetRasDialOutProtocols
RouterEntryDlgW
RasDialDlgA
RasUserEnableManualDial
RasSrvAddPropPages
RasEntryDlgA
RasSrvInitializeService
RasSrvIsConnectionConnected
RasAutodialQueryDlgA
RasPhonebookDlgA
RasSrvAllowConnectionsConfig

rasman

RasAddNotification
IsRasmanProcess
RasAddConnectionPort
RasAllocateRoute
RasActivateRouteEx

advapi32

RegQueryValueExW
RegOpenKeyExA
RegOpenKeyW
RegCloseKey
RegQueryValueExA

rasapi32

RasSetSubEntryPropertiesW
RasValidateEntryNameA
DwCloneEntry
RasValidateEntryNameW

rasctrs

CloseRasPerformanceData
CollectRasPerformanceData
OpenRasPerformanceData

raschap

RasEapGetInfo
RasCpEnumProtocolIds
RasCpGetInfo

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 23KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80115f9e414eca8538654e73098b9860

Headers

File Characteristics

Imports

kernel32

rasdlg

rasman

advapi32

rasapi32

rasctrs

raschap

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 23KB - Virtual size: 2.0MB

.edata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 23KB - Virtual size: 2.0MB

.edata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB