d9e4c9e859c43262a8300d29957afbc0097b73b8ed145a2bcb8e28fe4f6042b6

Sharing

Copy URL Twitter E-mail

General

Target

d9e4c9e859c43262a8300d29957afbc0097b73b8ed145a2bcb8e28fe4f6042b6
Size

211KB
MD5

83848b8ec5da3dbaf5b06031a85b8797
SHA1

ac58232edd86cb8a562a290e1e8d85d4b2c91779
SHA256

d9e4c9e859c43262a8300d29957afbc0097b73b8ed145a2bcb8e28fe4f6042b6
SHA512

a8505a7519d9e87a636c4db167b7a4155658b308f25490c0f778cbda99df65adf1fb7b4c136e763169283fbde861f29396bf4cdb93106941199acf56163523f6
SSDEEP

3072:wfScor+JLpBm4J0hZZ2GBUUlSIQsXb2kjfz9rso0m2afyugqFCCbZSuUtsooqI3W:A7UDh5zQsXbhlA9mDyd3LuUCooT2Ukb

Score

N/A

Malware Config

Signatures

Files

d9e4c9e859c43262a8300d29957afbc0097b73b8ed145a2bcb8e28fe4f6042b6
.exe windows x86

93813980d0c152322cfe4fcf026392ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasdlg

RouterEntryDlgW
GetRasDialOutProtocols
RasSrvAddPropPages
RasAutodialQueryDlgA
RasSrvInitializeService
RasEntryDlgA
RasPhonebookDlgW
RasSrvAllowConnectionsConfig
RasUserPrefsDlg
RasSrvIsConnectionConnected
RasSrvHangupConnection
RasUserEnableManualDial
RasAutodialQueryDlgW
RasDialDlgW
RasEntryDlgW
RasDialDlgA
RasSrvEnumConnections
RasSrvIsServiceRunning
RasUserGetManualDial
RasPhonebookDlgA
DwTerminalDlg
RasSrvCleanupService
RouterEntryDlgA

kernel32

MultiByteToWideChar
WideCharToMultiByte
LockResource
GetEnvironmentStringsW
FindResourceA
lstrcpyA
CreateFileA
LoadLibraryW
lstrcmpA
GetLocaleInfoW
HeapFree
GetSystemTimeAsFileTime
FreeResource
SystemTimeToFileTime
QueryDosDeviceA
LoadResource
GetVolumeInformationA
CloseHandle
HeapAlloc
GetSystemDefaultLCID
GetLocalTime
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcessId
lstrlenA
QueryPerformanceCounter
DeviceIoControl
GetTickCount
GetUserDefaultLCID
GetOEMCP
GetProcessHeap
GetCurrentProcess

advapi32

RegOpenKeyExA
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegQueryValueExA

rasctrs

CollectRasPerformanceData
OpenRasPerformanceData
CloseRasPerformanceData

raschap

RasCpEnumProtocolIds
RasCpGetInfo
RasEapGetInfo

rasapi32

RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW

rasman

IsRasmanProcess
RasActivateRouteEx
RasAddConnectionPort
RasAddNotification
RasAllocateRoute

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 18KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93813980d0c152322cfe4fcf026392ca

Headers

File Characteristics

Imports

rasdlg

kernel32

advapi32

rasctrs

raschap

rasapi32

rasman

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 18KB - Virtual size: 2.0MB

.edata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 18KB - Virtual size: 2.0MB

.edata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB