fcb42a77a837e01fec1fc28463a7687d792f92f7c7dddca94696f2e10d62fa05

Sharing

Copy URL Twitter E-mail

General

Target

fcb42a77a837e01fec1fc28463a7687d792f92f7c7dddca94696f2e10d62fa05
Size

216KB
MD5

82cd061d58b08f02f77255c257574c08
SHA1

511fb42e69c7386a98d38b52774f4e076bdb9765
SHA256

fcb42a77a837e01fec1fc28463a7687d792f92f7c7dddca94696f2e10d62fa05
SHA512

274927e4e2fb8be99de0544fe6acda34ab2334311a4db6cee443ec871579d7028df431916e34cc15470d2658d8e82252eab8ebab2fe05958aaad6d2df41e7865
SSDEEP

6144:TXhGDY8OfkQ95OO4HCrs3FCsVRBjzxq/sKaHMrf:TiY8OMQ95OO1ytrf/KX

Score

N/A

Malware Config

Signatures

Files

fcb42a77a837e01fec1fc28463a7687d792f92f7c7dddca94696f2e10d62fa05
.exe windows x86

3143381ba3d20de0cb506cc127e60965

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasdlg

RasSrvIsServiceRunning
RasAutodialQueryDlgA
RasEntryDlgW
DwTerminalDlg
RasUserEnableManualDial
RasPhonebookDlgA
RasSrvHangupConnection
RasUserGetManualDial
RasSrvInitializeService
RasSrvCleanupService
RasDialDlgA
RasSrvAddPropPages
RouterEntryDlgA
RasUserPrefsDlg
RouterEntryDlgW
RasSrvAllowConnectionsConfig
RasAutodialQueryDlgW
RasSrvIsConnectionConnected
RasPhonebookDlgW
RasEntryDlgA
GetRasDialOutProtocols
RasDialDlgW
RasSrvEnumConnections

rasapi32

RasValidateEntryNameW
RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry

kernel32

MultiByteToWideChar
GetTickCount
GetUserDefaultLCID
CloseHandle
lstrlenA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
SystemTimeToFileTime
GetVolumeInformationA
lstrcpyA
lstrcmpA
GetCurrentProcessId
LockResource
CreateFileA
HeapFree
SetUnhandledExceptionFilter
GetOEMCP
GetLocaleInfoW
FindResourceA
GetLocalTime
DeviceIoControl
QueryDosDeviceA
HeapAlloc
LoadResource
GetProcessHeap
WideCharToMultiByte
GetSystemDefaultLCID
SetLastError
LoadLibraryW
FreeResource
GetCurrentProcess

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegOpenKeyW

rasman

RasAddConnectionPort
RasAddNotification
IsRasmanProcess
RasAllocateRoute
RasActivateRouteEx

rasctrs

CloseRasPerformanceData
OpenRasPerformanceData
CollectRasPerformanceData

raschap

RasCpGetInfo
RasEapGetInfo
RasCpEnumProtocolIds

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 22KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3143381ba3d20de0cb506cc127e60965

Headers

File Characteristics

Imports

rasdlg

rasapi32

kernel32

advapi32

rasman

rasctrs

raschap

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 22KB - Virtual size: 2.0MB

.edata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 22KB - Virtual size: 2.0MB

.edata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB