a0bf9033948a346a54cc624087df29061b9d083a8c5aa9ac96d6a9b26fff76d0

Sharing

Copy URL Twitter E-mail

General

Target

a0bf9033948a346a54cc624087df29061b9d083a8c5aa9ac96d6a9b26fff76d0
Size

213KB
MD5

7d07c7e33b6064425c26f9c838a23c6b
SHA1

e4bfc093f033627c9ffd2d0785903f2198cc2de7
SHA256

a0bf9033948a346a54cc624087df29061b9d083a8c5aa9ac96d6a9b26fff76d0
SHA512

8d3590727800774b5e7d2877147ab092fb0a9b36218aeff742a32a48718ee92bae2bcd6dc8a4f5be6c6a22a7c621afe1c16fd04d69f6a2eb6799191412c7d4c1
SSDEEP

6144:p7h5/VSVAAWReBEqfQ7HRgAulHdM1hRg9ZR6G:3hVhAWKET1g1VdM1hRgLR6G

Score

N/A

Malware Config

Signatures

Files

a0bf9033948a346a54cc624087df29061b9d083a8c5aa9ac96d6a9b26fff76d0
.exe windows x86

36337c1942852967b8eb59cdbdac5ca7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasman

IsRasmanProcess
RasAddNotification
RasAllocateRoute
RasAddConnectionPort
RasActivateRouteEx

rasapi32

DwCloneEntry
RasSetSubEntryPropertiesW
RasValidateEntryNameW
RasValidateEntryNameA

kernel32

QueryPerformanceCounter
SetLastError
GetOEMCP
GetSystemTimeAsFileTime
CloseHandle
GetProcessHeap
HeapFree
GetLocaleInfoW
GetCurrentProcess
MultiByteToWideChar
GetUserDefaultLCID
GetVolumeInformationA
lstrlenA
FreeResource
CreateFileA
SetUnhandledExceptionFilter
WideCharToMultiByte
LockResource
GetCurrentProcessId
GetSystemDefaultLCID
lstrcpyA
GetLocalTime
GetTickCount
LoadResource
LoadLibraryW
SystemTimeToFileTime
QueryDosDeviceA
lstrcmpA
GetEnvironmentStringsW
HeapAlloc
DeviceIoControl
FindResourceA

rasdlg

GetRasDialOutProtocols
DwTerminalDlg
RasEntryDlgW
RasSrvIsConnectionConnected
RasUserPrefsDlg
RasSrvCleanupService
RasPhonebookDlgA
RasSrvHangupConnection
RasSrvAllowConnectionsConfig
RasSrvAddPropPages
RasUserGetManualDial
RasDialDlgW
RasUserEnableManualDial
RouterEntryDlgW
RasAutodialQueryDlgW
RasEntryDlgA
RasSrvInitializeService
RasPhonebookDlgW
RasDialDlgA
RasSrvEnumConnections
RasAutodialQueryDlgA
RouterEntryDlgA
RasSrvIsServiceRunning

raschap

RasEapGetInfo
RasCpGetInfo
RasCpEnumProtocolIds

rasctrs

CollectRasPerformanceData
OpenRasPerformanceData
CloseRasPerformanceData

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyW
RegQueryValueExA

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36337c1942852967b8eb59cdbdac5ca7

Headers

File Characteristics

Imports

rasman

rasapi32

kernel32

rasdlg

raschap

rasctrs

advapi32

Sections

.text Size: 101KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 21KB - Virtual size: 2.0MB

.zdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 101KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 21KB - Virtual size: 2.0MB

.zdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB