46c8c52b79055877bbee9b1e9ec94814bd12509b66e05937354c1bb3115d3bfc

General

Target

46c8c52b79055877bbee9b1e9ec94814bd12509b66e05937354c1bb3115d3bfc
Size

210KB
MD5

812f95d9120e96302a9c79b06c009c85
SHA1

93f197122ec6f020fec5a9ac998656054f1f3a4e
SHA256

46c8c52b79055877bbee9b1e9ec94814bd12509b66e05937354c1bb3115d3bfc
SHA512

7a8429cb1b546d4e1310830ab76e6b30b6ea05bf8eed6bcc2ae37438ff8f03b9663d12e91b984d196be18cfd5014b13341463c70f950f0feb97af20796ee0dd9
SSDEEP

3072:VUIiEDnBIgyRaq6MYfUwq+VoeqITaBwcysS4umRPI9elF2vRpEMnHdJ:XpDnDlvUwq+avILzkumu7vR

Score

N/A

Malware Config

Signatures

Files

46c8c52b79055877bbee9b1e9ec94814bd12509b66e05937354c1bb3115d3bfc
.exe windows x86

db8c24328f14bb0cabdb74af26eda055

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
QueryPerformanceCounter
GetOEMCP
lstrcpyA
CloseHandle
GetCurrentProcess
QueryDosDeviceA
GetLocaleInfoW
MultiByteToWideChar
LockResource
GetCurrentProcessId
GetEnvironmentStringsW
CreateFileA
GetSystemTimeAsFileTime
lstrcmpA
SetLastError
SetUnhandledExceptionFilter
GetLocalTime
FindResourceA
GetVolumeInformationA
lstrlenA
LoadLibraryW
WideCharToMultiByte
HeapFree
HeapAlloc
SystemTimeToFileTime
GetProcessHeap

rasman

RasAddConnectionPort
RasActivateRouteEx
RasAllocateRoute
IsRasmanProcess

rasctrs

CollectRasPerformanceData
CloseRasPerformanceData
OpenRasPerformanceData

advapi32

RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

rasapi32

RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW
RasValidateEntryNameA

raschap

RasCpEnumProtocolIds
RasEapGetInfo
RasCpGetInfo

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db8c24328f14bb0cabdb74af26eda055

Headers

File Characteristics

Imports

kernel32

rasman

rasctrs

advapi32

rasapi32

raschap

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 55KB - Virtual size: 54KB

.hdata Size: 21KB - Virtual size: 227KB

.qdata Size: 31KB - Virtual size: 31KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 55KB - Virtual size: 54KB

.hdata
Size: 21KB - Virtual size: 227KB

.qdata
Size: 31KB - Virtual size: 31KB

.rsrc
Size: 1KB - Virtual size: 1KB