9ebffceb89f97ac53349d325dce1ae4211132782898a87b2d727101c038a2dca

Sharing

Copy URL Twitter E-mail

General

Target

9ebffceb89f97ac53349d325dce1ae4211132782898a87b2d727101c038a2dca
Size

216KB
MD5

624f4bb943711c57199b5d462e53b8a3
SHA1

4461ec00fdc53062fa65754663e16e7802f870ed
SHA256

9ebffceb89f97ac53349d325dce1ae4211132782898a87b2d727101c038a2dca
SHA512

9ba9cb304846cb4ccd60388d7936244ea67492ad82df27a44fb339f69d2d64851f37d713331b445ce4d48441470855b118b97951ec44d40d2dc4340d36694bbc
SSDEEP

6144:TXhGDY8OfkQ95OO4HCrs3FCsVRBjzxq/sKaHMl:TiY8OMQ95OO1ytrf/KB

Score

N/A

Malware Config

Signatures

Files

9ebffceb89f97ac53349d325dce1ae4211132782898a87b2d727101c038a2dca
.exe windows x86

3143381ba3d20de0cb506cc127e60965

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasdlg

RasSrvIsServiceRunning
RasAutodialQueryDlgA
RasEntryDlgW
DwTerminalDlg
RasUserEnableManualDial
RasPhonebookDlgA
RasSrvHangupConnection
RasUserGetManualDial
RasSrvInitializeService
RasSrvCleanupService
RasDialDlgA
RasSrvAddPropPages
RouterEntryDlgA
RasUserPrefsDlg
RouterEntryDlgW
RasSrvAllowConnectionsConfig
RasAutodialQueryDlgW
RasSrvIsConnectionConnected
RasPhonebookDlgW
RasEntryDlgA
GetRasDialOutProtocols
RasDialDlgW
RasSrvEnumConnections

rasapi32

RasValidateEntryNameW
RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry

kernel32

MultiByteToWideChar
GetTickCount
GetUserDefaultLCID
CloseHandle
lstrlenA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
SystemTimeToFileTime
GetVolumeInformationA
lstrcpyA
lstrcmpA
GetCurrentProcessId
LockResource
CreateFileA
HeapFree
SetUnhandledExceptionFilter
GetOEMCP
GetLocaleInfoW
FindResourceA
GetLocalTime
DeviceIoControl
QueryDosDeviceA
HeapAlloc
LoadResource
GetProcessHeap
WideCharToMultiByte
GetSystemDefaultLCID
SetLastError
LoadLibraryW
FreeResource
GetCurrentProcess

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegOpenKeyW

rasman

RasAddConnectionPort
RasAddNotification
IsRasmanProcess
RasAllocateRoute
RasActivateRouteEx

rasctrs

CloseRasPerformanceData
OpenRasPerformanceData
CollectRasPerformanceData

raschap

RasCpGetInfo
RasEapGetInfo
RasCpEnumProtocolIds

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 22KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3143381ba3d20de0cb506cc127e60965

Headers

File Characteristics

Imports

rasdlg

rasapi32

kernel32

advapi32

rasman

rasctrs

raschap

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 22KB - Virtual size: 2.0MB

.edata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 22KB - Virtual size: 2.0MB

.edata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB