8e6f503c382cac4d41919d8f1989f658b9a0e76c3e071c7594447cf989380014

Sharing

Copy URL

Twitter E-mail

General

Target

8e6f503c382cac4d41919d8f1989f658b9a0e76c3e071c7594447cf989380014
Size

212KB
MD5

820c03e1dd01d441eab60cc4dfcbc7b0
SHA1

6975eb022ae1793b8c36fa93f590108d21ba0b1d
SHA256

8e6f503c382cac4d41919d8f1989f658b9a0e76c3e071c7594447cf989380014
SHA512

41b8a1c0a3be7b109bcbca5085f333c26c90e1819087c47e7530b779d590fb1d6a07ea540a0811b4060fd690377bdac87a473b8ab3e95001fc4a0ea245793a02
SSDEEP

6144:gPUZ1jxhINfRN02uxJekQ4ARtXFWuVD1GbNAL:gPSTuDwx0kQjtXFWuR1GbOL

Score

N/A

Malware Config

Signatures

Files

8e6f503c382cac4d41919d8f1989f658b9a0e76c3e071c7594447cf989380014
.exe windows x86

ab4aa11ae8320ead77ce7c7b320b7775

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
GetProcessHeap
GetOEMCP
LoadLibraryW
lstrlenA
CloseHandle
GetEnvironmentStringsW
GetUserDefaultLCID
GetCurrentProcess
GetSystemDefaultLCID
HeapFree
lstrcmpA
FreeResource
LockResource
MultiByteToWideChar
CreateFileA
LoadResource
FindResourceA
QueryPerformanceCounter
GetLocalTime
HeapAlloc
GetCurrentProcessId
SetUnhandledExceptionFilter
lstrcpyA
WideCharToMultiByte
GetLocaleInfoW
DeviceIoControl
QueryDosDeviceA
GetVolumeInformationA
GetTickCount
GetSystemTimeAsFileTime
SetLastError

raschap

RasCpEnumProtocolIds
RasEapGetInfo
RasCpGetInfo

rasctrs

CloseRasPerformanceData
OpenRasPerformanceData
CollectRasPerformanceData

rasman

RasAddNotification
IsRasmanProcess
RasActivateRouteEx
RasAddConnectionPort
RasAllocateRoute

rasdlg

RasPhonebookDlgW
DwTerminalDlg
GetRasDialOutProtocols
RasSrvAddPropPages
RouterEntryDlgW
RasUserGetManualDial
RasAutodialQueryDlgA
RasSrvIsConnectionConnected
RouterEntryDlgA
RasSrvHangupConnection
RasDialDlgW
RasSrvIsServiceRunning
RasUserPrefsDlg
RasUserEnableManualDial
RasAutodialQueryDlgW
RasSrvInitializeService
RasEntryDlgW
RasSrvCleanupService
RasSrvAllowConnectionsConfig
RasPhonebookDlgA
RasDialDlgA
RasEntryDlgA
RasSrvEnumConnections

rasapi32

RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW

advapi32

RegOpenKeyExA
RegOpenKeyW
RegQueryValueExA
RegCloseKey
RegQueryValueExW

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab4aa11ae8320ead77ce7c7b320b7775

Headers

File Characteristics

Imports

kernel32

raschap

rasctrs

rasman

rasdlg

rasapi32

advapi32

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 21KB - Virtual size: 2.0MB

.zdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 21KB - Virtual size: 2.0MB

.zdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB