54388224a891aff53e513c8de3c969a16abe0fc9c81722c3fd4cff5330a88baa

Sharing

Copy URL Twitter E-mail

General

Target

54388224a891aff53e513c8de3c969a16abe0fc9c81722c3fd4cff5330a88baa
Size

211KB
MD5

587503f2defa03bf40a9b0cb18bff300
SHA1

5323ef0c4038d0fa3da8e1871eb1d9da2b9ff176
SHA256

54388224a891aff53e513c8de3c969a16abe0fc9c81722c3fd4cff5330a88baa
SHA512

a894892d34a4d4309645f717bbc64d960ff0dbe9f5955d45447bb4cd8a6edc61872ce9b8f3cbaa509efc362d3fe7efb8ea298788ef5c0b0487c95bc43ad0eacd
SSDEEP

3072:wfScor+JLpBm4J0hZZ2GBUUlSIQsXb2kjfz9rso0m2afyugqFCCbZSuUtsooqI3A:A7UDh5zQsXbhlA9mDyd3LuUCooT2Uk9

Score

N/A

Malware Config

Signatures

Files

54388224a891aff53e513c8de3c969a16abe0fc9c81722c3fd4cff5330a88baa
.exe windows x86

93813980d0c152322cfe4fcf026392ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasdlg

RouterEntryDlgW
GetRasDialOutProtocols
RasSrvAddPropPages
RasAutodialQueryDlgA
RasSrvInitializeService
RasEntryDlgA
RasPhonebookDlgW
RasSrvAllowConnectionsConfig
RasUserPrefsDlg
RasSrvIsConnectionConnected
RasSrvHangupConnection
RasUserEnableManualDial
RasAutodialQueryDlgW
RasDialDlgW
RasEntryDlgW
RasDialDlgA
RasSrvEnumConnections
RasSrvIsServiceRunning
RasUserGetManualDial
RasPhonebookDlgA
DwTerminalDlg
RasSrvCleanupService
RouterEntryDlgA

kernel32

MultiByteToWideChar
WideCharToMultiByte
LockResource
GetEnvironmentStringsW
FindResourceA
lstrcpyA
CreateFileA
LoadLibraryW
lstrcmpA
GetLocaleInfoW
HeapFree
GetSystemTimeAsFileTime
FreeResource
SystemTimeToFileTime
QueryDosDeviceA
LoadResource
GetVolumeInformationA
CloseHandle
HeapAlloc
GetSystemDefaultLCID
GetLocalTime
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcessId
lstrlenA
QueryPerformanceCounter
DeviceIoControl
GetTickCount
GetUserDefaultLCID
GetOEMCP
GetProcessHeap
GetCurrentProcess

advapi32

RegOpenKeyExA
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegQueryValueExA

rasctrs

CollectRasPerformanceData
OpenRasPerformanceData
CloseRasPerformanceData

raschap

RasCpEnumProtocolIds
RasCpGetInfo
RasEapGetInfo

rasapi32

RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW

rasman

IsRasmanProcess
RasActivateRouteEx
RasAddConnectionPort
RasAddNotification
RasAllocateRoute

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 18KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93813980d0c152322cfe4fcf026392ca

Headers

File Characteristics

Imports

rasdlg

kernel32

advapi32

rasctrs

raschap

rasapi32

rasman

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 18KB - Virtual size: 2.0MB

.edata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 18KB - Virtual size: 2.0MB

.edata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB