2bd885eec64b4759e71b10e4c8aa392c14a8481d44a570b1779c494a30eee8b9

Sharing

Copy URL Twitter E-mail

General

Target

2bd885eec64b4759e71b10e4c8aa392c14a8481d44a570b1779c494a30eee8b9
Size

217KB
MD5

81269c761fe0de769152bcb543491e60
SHA1

f1e40d9cad190517e0c98f286a79a52ebe04822d
SHA256

2bd885eec64b4759e71b10e4c8aa392c14a8481d44a570b1779c494a30eee8b9
SHA512

f85afbd794bed10b4ec8b7497f89e5ec4dc0007d7eea33e8b70dd9e6f443f32031b72772044e361f0039a9a04869ecab46c95ff6284cabbf7ea2e79408f383dd
SSDEEP

6144:r51jJe1P3T5t6DJV/lV7Wx5R/QXB+P6cjGunLmaQVX+A:3jJsP3T5t6DJ5LaEXQPVGuL1QJ

Score

N/A

Malware Config

Signatures

Files

2bd885eec64b4759e71b10e4c8aa392c14a8481d44a570b1779c494a30eee8b9
.exe windows x86

80115f9e414eca8538654e73098b9860

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
LockResource
SetUnhandledExceptionFilter
QueryPerformanceCounter
HeapFree
GetOEMCP
GetSystemDefaultLCID
lstrcpyA
QueryDosDeviceA
MultiByteToWideChar
WideCharToMultiByte
GetVolumeInformationA
LoadResource
GetProcessHeap
GetTickCount
SetLastError
LoadLibraryW
lstrcmpA
HeapAlloc
lstrlenA
GetSystemTimeAsFileTime
GetCurrentProcess
CloseHandle
GetEnvironmentStringsW
GetLocalTime
DeviceIoControl
FreeResource
GetUserDefaultLCID
SystemTimeToFileTime
FindResourceA
GetCurrentProcessId
CreateFileA

rasdlg

RasEntryDlgW
RasUserPrefsDlg
RasPhonebookDlgW
RouterEntryDlgA
RasSrvIsServiceRunning
RasSrvEnumConnections
RasSrvCleanupService
RasAutodialQueryDlgW
RasSrvHangupConnection
RasDialDlgW
DwTerminalDlg
RasUserGetManualDial
GetRasDialOutProtocols
RouterEntryDlgW
RasDialDlgA
RasUserEnableManualDial
RasSrvAddPropPages
RasEntryDlgA
RasSrvInitializeService
RasSrvIsConnectionConnected
RasAutodialQueryDlgA
RasPhonebookDlgA
RasSrvAllowConnectionsConfig

rasman

RasAddNotification
IsRasmanProcess
RasAddConnectionPort
RasAllocateRoute
RasActivateRouteEx

advapi32

RegQueryValueExW
RegOpenKeyExA
RegOpenKeyW
RegCloseKey
RegQueryValueExA

rasapi32

RasSetSubEntryPropertiesW
RasValidateEntryNameA
DwCloneEntry
RasValidateEntryNameW

rasctrs

CloseRasPerformanceData
CollectRasPerformanceData
OpenRasPerformanceData

raschap

RasEapGetInfo
RasCpEnumProtocolIds
RasCpGetInfo

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 23KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80115f9e414eca8538654e73098b9860

Headers

File Characteristics

Imports

kernel32

rasdlg

rasman

advapi32

rasapi32

rasctrs

raschap

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 23KB - Virtual size: 2.0MB

.edata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 23KB - Virtual size: 2.0MB

.edata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB