4210bb695801bc5a62003743ce678a25083db7aa5f9a0e7c3e26cc0c0f2f3511

General

Target

4210bb695801bc5a62003743ce678a25083db7aa5f9a0e7c3e26cc0c0f2f3511
Size

210KB
MD5

84da5ee4c4ac7fb9a62f390ea337758a
SHA1

256e76ba290533968afd1915af05ead4aa6f583f
SHA256

4210bb695801bc5a62003743ce678a25083db7aa5f9a0e7c3e26cc0c0f2f3511
SHA512

137eb86bb261590bbd9b6859af2a60eadfa40b652b3839131396f40d26c1d142eb1bb54312d6f42bbef64596b03498ac7c23a37d8ff135502b8c8df48410cd88
SSDEEP

3072:VUIiEDnBIgyRaq6MYfUwq+VoeqITaBwcysS4umRPI9elF2vRpEMnHk:XpDnDlvUwq+avILzkumu7ve

Score

N/A

Malware Config

Signatures

Files

4210bb695801bc5a62003743ce678a25083db7aa5f9a0e7c3e26cc0c0f2f3511
.exe windows x86

db8c24328f14bb0cabdb74af26eda055

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
QueryPerformanceCounter
GetOEMCP
lstrcpyA
CloseHandle
GetCurrentProcess
QueryDosDeviceA
GetLocaleInfoW
MultiByteToWideChar
LockResource
GetCurrentProcessId
GetEnvironmentStringsW
CreateFileA
GetSystemTimeAsFileTime
lstrcmpA
SetLastError
SetUnhandledExceptionFilter
GetLocalTime
FindResourceA
GetVolumeInformationA
lstrlenA
LoadLibraryW
WideCharToMultiByte
HeapFree
HeapAlloc
SystemTimeToFileTime
GetProcessHeap

rasman

RasAddConnectionPort
RasActivateRouteEx
RasAllocateRoute
IsRasmanProcess

rasctrs

CollectRasPerformanceData
CloseRasPerformanceData
OpenRasPerformanceData

advapi32

RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

rasapi32

RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW
RasValidateEntryNameA

raschap

RasCpEnumProtocolIds
RasEapGetInfo
RasCpGetInfo

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db8c24328f14bb0cabdb74af26eda055

Headers

File Characteristics

Imports

kernel32

rasman

rasctrs

advapi32

rasapi32

raschap

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 55KB - Virtual size: 54KB

.hdata Size: 21KB - Virtual size: 227KB

.qdata Size: 31KB - Virtual size: 31KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 55KB - Virtual size: 54KB

.hdata
Size: 21KB - Virtual size: 227KB

.qdata
Size: 31KB - Virtual size: 31KB

.rsrc
Size: 1KB - Virtual size: 1KB