6dc69c48c5cd3cd76bf65ab7c4d421c4945c1fda24b807c33ece967fd7bf7db2

General

Target

6dc69c48c5cd3cd76bf65ab7c4d421c4945c1fda24b807c33ece967fd7bf7db2
Size

209KB
MD5

7a3f6603f72c348dadf02fd17bc0a2bb
SHA1

2dff84f63bd954753a02cb7c2e9aa26289b4ae72
SHA256

6dc69c48c5cd3cd76bf65ab7c4d421c4945c1fda24b807c33ece967fd7bf7db2
SHA512

05cc0a59c2f8467a3452f9533c722fb694bcd6b4e534494ef8ff26d1344a324aeb21effdc7a0cee053e5154577697c27650e28cc0be12b397b80dc1a8329cfa9
SSDEEP

3072:nPAbXPyC8+H0sfBS7QsKSrpxdYvqsSiD7cYV96RSvlUr53lH58WaKiuXfi8PeA+H:IXPbhHFpSp/9xdY9Siv96YvlUBl/zC0o

Score

N/A

Malware Config

Signatures

Files

6dc69c48c5cd3cd76bf65ab7c4d421c4945c1fda24b807c33ece967fd7bf7db2
.exe windows x86

06ba45096e234d3614a93dd22606d68e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
LockResource
CloseHandle
WideCharToMultiByte
QueryDosDeviceA
SetLastError
FindResourceA
SystemTimeToFileTime
GetEnvironmentStringsW
GetTickCount
QueryPerformanceCounter
HeapAlloc
GetSystemTimeAsFileTime
CreateFileA
lstrcpyA
GetOEMCP
GetLocaleInfoW
GetLocalTime
GetVolumeInformationA
lstrlenA
LoadLibraryW
GetCurrentProcess
lstrcmpA
MultiByteToWideChar
HeapFree
DeviceIoControl
GetProcessHeap
LoadResource
SetUnhandledExceptionFilter
FreeResource

rasman

RasActivateRouteEx
RasAddConnectionPort
RasAllocateRoute
RasAddNotification
IsRasmanProcess

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyW
RegQueryValueExA
RegOpenKeyExA

rasapi32

DwCloneEntry
RasValidateEntryNameA
RasSetSubEntryPropertiesW
RasValidateEntryNameW

raschap

RasCpGetInfo
RasEapGetInfo
RasCpEnumProtocolIds

rasctrs

OpenRasPerformanceData
CloseRasPerformanceData
CollectRasPerformanceData

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 17KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06ba45096e234d3614a93dd22606d68e

Headers

File Characteristics

Imports

kernel32

rasman

advapi32

rasapi32

raschap

rasctrs

Sections

.text Size: 102KB - Virtual size: 101KB

.rdata Size: 72KB - Virtual size: 71KB

.hdata Size: 17KB - Virtual size: 165KB

.cdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 102KB - Virtual size: 101KB

.rdata
Size: 72KB - Virtual size: 71KB

.hdata
Size: 17KB - Virtual size: 165KB

.cdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB