bcd73bf2fdf8b26abf5a0fa6174da6e566b0771a4ac758361ff31f125d20f131

Sharing

Copy URL Twitter E-mail

General

Target

bcd73bf2fdf8b26abf5a0fa6174da6e566b0771a4ac758361ff31f125d20f131
Size

497KB
MD5

a153032f9a17a504b85aa3221f49dde0
SHA1

9641f11b6fc39037a5f1030fcf50518d7c6ce7cd
SHA256

bcd73bf2fdf8b26abf5a0fa6174da6e566b0771a4ac758361ff31f125d20f131
SHA512

9558bd38d59e20b8de47cecf63524072b44fb31a9bfdf3afd35608f384fd1510941aea2857daa40a4850c7ed1dbe10b2afcfe96fc456466cca49023147a45769
SSDEEP

12288:TwH53p1RATuBzj1eUkjx7MgV34/3AvAfo7O:EnjZ0UI4/3oO

Score

N/A

Malware Config

Signatures

Files

bcd73bf2fdf8b26abf5a0fa6174da6e566b0771a4ac758361ff31f125d20f131
.exe windows x86

341267a6303c9dc1047fca1b0eac69d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCatW

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExW

msvcrt

__winitenv
_XcptFilter
_except_handler3
_exit
strstr
_adjust_fdiv
_stricmp
_initterm
__wgetmainargs
wcscpy
sprintf
printf
_cexit
_c_exit
__setusermatherr
_controlfp
__p__fmode
_wcsicmp

rasdlg

RasAutodialQueryDlgW
RasPhonebookDlgW
RasDialDlgW

kernel32

MultiByteToWideChar
GetWindowsDirectoryW
GetModuleFileNameW
WideCharToMultiByte
GetCurrentProcessId
GetLastError
LocalFree
GetProcAddress
ProcessIdToSessionId
ExpandEnvironmentStringsW
LoadLibraryA
FreeLibrary
VirtualFree
GetTickCount
LocalAlloc
GetSystemDefaultLangID

ntdll

NtQuerySystemInformation
NtOpenFile
DbgPrint
RtlInitUnicodeString
NtClose

tapi32

lineInitialize
lineGetTranslateCapsW

rasapi32

RasGetAutodialAddressW
RasEnumAutodialAddressesW
RasGetAutodialParamW

Sections

.text
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mest
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

341267a6303c9dc1047fca1b0eac69d1

Headers

File Characteristics

Imports

shlwapi

advapi32

msvcrt

rasdlg

kernel32

ntdll

tapi32

rasapi32

Sections

.text Size: 270KB - Virtual size: 269KB

.mest Size: 58KB - Virtual size: 57KB

.rdata Size: 59KB - Virtual size: 58KB

.data Size: 58KB - Virtual size: 57KB

.rsrc Size: 49KB - Virtual size: 49KB

.reloc Size: 512B - Virtual size: 296B

.text
Size: 270KB - Virtual size: 269KB

.mest
Size: 58KB - Virtual size: 57KB

.rdata
Size: 59KB - Virtual size: 58KB

.data
Size: 58KB - Virtual size: 57KB

.rsrc
Size: 49KB - Virtual size: 49KB

.reloc
Size: 512B - Virtual size: 296B