e8043d0a71863374d01fce4f6294df5429cf41cbe83747e9272f6d5ea90db83f

Sharing

Copy URL

Twitter E-mail

General

Target

e8043d0a71863374d01fce4f6294df5429cf41cbe83747e9272f6d5ea90db83f
Size

216KB
MD5

6abd52fd87271e51f051820d08cee82f
SHA1

c10bb72e2e1caffa6ea22bc89665fe12f8f91013
SHA256

e8043d0a71863374d01fce4f6294df5429cf41cbe83747e9272f6d5ea90db83f
SHA512

14d8079f301fefd9d462d164a36902c61112099bbd98f0e44a2c6e8178725ffae58f3c816ea8f9a057d33793406406283024e12fdaf110f5d1a66f714ded0dc6
SSDEEP

6144:TXhGDY8OfkQ95OO4HCrs3FCsVRBjzxq/sKaHM7:TiY8OMQ95OO1ytrf/Kn

Score

N/A

Malware Config

Signatures

Files

e8043d0a71863374d01fce4f6294df5429cf41cbe83747e9272f6d5ea90db83f
.exe windows x86

3143381ba3d20de0cb506cc127e60965

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasdlg

RasSrvIsServiceRunning
RasAutodialQueryDlgA
RasEntryDlgW
DwTerminalDlg
RasUserEnableManualDial
RasPhonebookDlgA
RasSrvHangupConnection
RasUserGetManualDial
RasSrvInitializeService
RasSrvCleanupService
RasDialDlgA
RasSrvAddPropPages
RouterEntryDlgA
RasUserPrefsDlg
RouterEntryDlgW
RasSrvAllowConnectionsConfig
RasAutodialQueryDlgW
RasSrvIsConnectionConnected
RasPhonebookDlgW
RasEntryDlgA
GetRasDialOutProtocols
RasDialDlgW
RasSrvEnumConnections

rasapi32

RasValidateEntryNameW
RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry

kernel32

MultiByteToWideChar
GetTickCount
GetUserDefaultLCID
CloseHandle
lstrlenA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
SystemTimeToFileTime
GetVolumeInformationA
lstrcpyA
lstrcmpA
GetCurrentProcessId
LockResource
CreateFileA
HeapFree
SetUnhandledExceptionFilter
GetOEMCP
GetLocaleInfoW
FindResourceA
GetLocalTime
DeviceIoControl
QueryDosDeviceA
HeapAlloc
LoadResource
GetProcessHeap
WideCharToMultiByte
GetSystemDefaultLCID
SetLastError
LoadLibraryW
FreeResource
GetCurrentProcess

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegOpenKeyW

rasman

RasAddConnectionPort
RasAddNotification
IsRasmanProcess
RasAllocateRoute
RasActivateRouteEx

rasctrs

CloseRasPerformanceData
OpenRasPerformanceData
CollectRasPerformanceData

raschap

RasCpGetInfo
RasEapGetInfo
RasCpEnumProtocolIds

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 22KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3143381ba3d20de0cb506cc127e60965

Headers

File Characteristics

Imports

rasdlg

rasapi32

kernel32

advapi32

rasman

rasctrs

raschap

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 22KB - Virtual size: 2.0MB

.edata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 22KB - Virtual size: 2.0MB

.edata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB