89de0cc71deb726707b44e37f9ef8901621c9978199272140e5cabd03a8d02b5

General

Target

89de0cc71deb726707b44e37f9ef8901621c9978199272140e5cabd03a8d02b5
Size

494KB
MD5

7881970deb3d17af12c3aebc996f41d0
SHA1

59d198a5c40479365e57d6637040093c3b71f500
SHA256

89de0cc71deb726707b44e37f9ef8901621c9978199272140e5cabd03a8d02b5
SHA512

d52ad330d39db368e2333d62a50132b3b537c5f28579958d19e958c307f6050f34a1db75d9029e6abeed79e19ca2c5ec6472d4fab62ef27a986bdae4fdb04d7b
SSDEEP

6144:f41kamPaTybf82FaFhZifyKvJLP9Pq+6g3RuCi/gZ4mjO/hN/o768Is2VWOo+g3C:wkdyQpaTkKi+gh8RiZIs2Lvg+bn

Score

N/A

Malware Config

Signatures

Files

89de0cc71deb726707b44e37f9ef8901621c9978199272140e5cabd03a8d02b5
.exe windows x86

fda5b5aac51ac9def8d91358d5e75124

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
sprintf
_cexit
_c_exit
__winitenv
_wcsicmp
_XcptFilter
__wgetmainargs
_except_handler3
_stricmp
strstr
_initterm
_adjust_fdiv
__p__fmode
_controlfp
wcscpy
_exit
printf

kernel32

RemoveDirectoryW
GetCPInfo
LocalFree
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
GetWindowsDirectoryW
GetTickCount
MultiByteToWideChar
VirtualFree
ExpandEnvironmentStringsW
GetLastError
GetCurrentProcessId
GetModuleFileNameW
LocalAlloc

rasdlg

RasAutodialQueryDlgW
RasPhonebookDlgW
RasDialDlgW

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExA

rasapi32

RasGetAutodialAddressW
RasGetAutodialParamW
RasEnumAutodialAddressesW

shlwapi

StrCatW

Sections

.safdwer
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fda5b5aac51ac9def8d91358d5e75124

Headers

File Characteristics

Imports

msvcrt

kernel32

rasdlg

advapi32

rasapi32

shlwapi

Sections

.safdwer Size: 57KB - Virtual size: 57KB

.rdata Size: 59KB - Virtual size: 58KB

.text Size: 267KB - Virtual size: 267KB

.data Size: 58KB - Virtual size: 57KB

.rsrc Size: 49KB - Virtual size: 49KB

.reloc Size: 512B - Virtual size: 252B

.safdwer
Size: 57KB - Virtual size: 57KB

.rdata
Size: 59KB - Virtual size: 58KB

.text
Size: 267KB - Virtual size: 267KB

.data
Size: 58KB - Virtual size: 57KB

.rsrc
Size: 49KB - Virtual size: 49KB

.reloc
Size: 512B - Virtual size: 252B