20fa963e6ac5a2aaacb8fdb4e8f8e363c76a79cbc4717f5705cb45d863e59202

General

Target

20fa963e6ac5a2aaacb8fdb4e8f8e363c76a79cbc4717f5705cb45d863e59202
Size

209KB
MD5

81fb9bb2fa02fac215884257fa471ef6
SHA1

88525f9304db2e9665726928af6b6ab0df3d1fa6
SHA256

20fa963e6ac5a2aaacb8fdb4e8f8e363c76a79cbc4717f5705cb45d863e59202
SHA512

8c0df8e79ad6c8002d0e9816ffeeab0aac63e515c6f76971e9561d433da85ec1a4ad70df7ca1878ac6b4bb685e66fd479875af0b0aa64b04ca5664e69f6341d6
SSDEEP

3072:nPAbXPyC8+H0sfBS7QsKSrpxdYvqsSiD7cYV96RSvlUr53lH58WaKiuXfi8PeA+S:IXPbhHFpSp/9xdY9Siv96YvlUBl/zCI

Score

N/A

Malware Config

Signatures

Files

20fa963e6ac5a2aaacb8fdb4e8f8e363c76a79cbc4717f5705cb45d863e59202
.exe windows x86

06ba45096e234d3614a93dd22606d68e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
LockResource
CloseHandle
WideCharToMultiByte
QueryDosDeviceA
SetLastError
FindResourceA
SystemTimeToFileTime
GetEnvironmentStringsW
GetTickCount
QueryPerformanceCounter
HeapAlloc
GetSystemTimeAsFileTime
CreateFileA
lstrcpyA
GetOEMCP
GetLocaleInfoW
GetLocalTime
GetVolumeInformationA
lstrlenA
LoadLibraryW
GetCurrentProcess
lstrcmpA
MultiByteToWideChar
HeapFree
DeviceIoControl
GetProcessHeap
LoadResource
SetUnhandledExceptionFilter
FreeResource

rasman

RasActivateRouteEx
RasAddConnectionPort
RasAllocateRoute
RasAddNotification
IsRasmanProcess

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyW
RegQueryValueExA
RegOpenKeyExA

rasapi32

DwCloneEntry
RasValidateEntryNameA
RasSetSubEntryPropertiesW
RasValidateEntryNameW

raschap

RasCpGetInfo
RasEapGetInfo
RasCpEnumProtocolIds

rasctrs

OpenRasPerformanceData
CloseRasPerformanceData
CollectRasPerformanceData

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 17KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06ba45096e234d3614a93dd22606d68e

Headers

File Characteristics

Imports

kernel32

rasman

advapi32

rasapi32

raschap

rasctrs

Sections

.text Size: 102KB - Virtual size: 101KB

.rdata Size: 72KB - Virtual size: 71KB

.hdata Size: 17KB - Virtual size: 165KB

.cdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 102KB - Virtual size: 101KB

.rdata
Size: 72KB - Virtual size: 71KB

.hdata
Size: 17KB - Virtual size: 165KB

.cdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB