01fccacfe41b25550eb408912b862febc1ce899b8a990b083fda872fb28f4233

Sharing

Copy URL Twitter E-mail

General

Target

01fccacfe41b25550eb408912b862febc1ce899b8a990b083fda872fb28f4233
Size

213KB
MD5

83c33e1481b435ea4ae77fc1d624bc54
SHA1

cf67aa559739d5038e038caa74d20488b8f95e25
SHA256

01fccacfe41b25550eb408912b862febc1ce899b8a990b083fda872fb28f4233
SHA512

fec81674678179b2ca9e3573bdbabe6fb908b32557b0ea9d6a24adff63c72e9f42bd8b63d368c4e1731e6283a7df5afa086c5a7d556d956660e56f2a8f34f9bf
SSDEEP

6144:p7h5/VSVAAWReBEqfQ7HRgAulHdM1hRg9ZR6c:3hVhAWKET1g1VdM1hRgLR6c

Score

N/A

Malware Config

Signatures

Files

01fccacfe41b25550eb408912b862febc1ce899b8a990b083fda872fb28f4233
.exe windows x86

36337c1942852967b8eb59cdbdac5ca7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasman

IsRasmanProcess
RasAddNotification
RasAllocateRoute
RasAddConnectionPort
RasActivateRouteEx

rasapi32

DwCloneEntry
RasSetSubEntryPropertiesW
RasValidateEntryNameW
RasValidateEntryNameA

kernel32

QueryPerformanceCounter
SetLastError
GetOEMCP
GetSystemTimeAsFileTime
CloseHandle
GetProcessHeap
HeapFree
GetLocaleInfoW
GetCurrentProcess
MultiByteToWideChar
GetUserDefaultLCID
GetVolumeInformationA
lstrlenA
FreeResource
CreateFileA
SetUnhandledExceptionFilter
WideCharToMultiByte
LockResource
GetCurrentProcessId
GetSystemDefaultLCID
lstrcpyA
GetLocalTime
GetTickCount
LoadResource
LoadLibraryW
SystemTimeToFileTime
QueryDosDeviceA
lstrcmpA
GetEnvironmentStringsW
HeapAlloc
DeviceIoControl
FindResourceA

rasdlg

GetRasDialOutProtocols
DwTerminalDlg
RasEntryDlgW
RasSrvIsConnectionConnected
RasUserPrefsDlg
RasSrvCleanupService
RasPhonebookDlgA
RasSrvHangupConnection
RasSrvAllowConnectionsConfig
RasSrvAddPropPages
RasUserGetManualDial
RasDialDlgW
RasUserEnableManualDial
RouterEntryDlgW
RasAutodialQueryDlgW
RasEntryDlgA
RasSrvInitializeService
RasPhonebookDlgW
RasDialDlgA
RasSrvEnumConnections
RasAutodialQueryDlgA
RouterEntryDlgA
RasSrvIsServiceRunning

raschap

RasEapGetInfo
RasCpGetInfo
RasCpEnumProtocolIds

rasctrs

CollectRasPerformanceData
OpenRasPerformanceData
CloseRasPerformanceData

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyW
RegQueryValueExA

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36337c1942852967b8eb59cdbdac5ca7

Headers

File Characteristics

Imports

rasman

rasapi32

kernel32

rasdlg

raschap

rasctrs

advapi32

Sections

.text Size: 101KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 21KB - Virtual size: 2.0MB

.zdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 101KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 21KB - Virtual size: 2.0MB

.zdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB