320f23003b5276fc4955316bdb9bd72d5cd1edad0a330fedec0fec8c1240c3a0

Sharing

Copy URL Twitter E-mail

General

Target

320f23003b5276fc4955316bdb9bd72d5cd1edad0a330fedec0fec8c1240c3a0
Size

213KB
MD5

053929ad7ae0dee7b9dc346dbab2da68
SHA1

f5d7ed45bba5e6f3ee71a3dc42ca7e91a533eb80
SHA256

320f23003b5276fc4955316bdb9bd72d5cd1edad0a330fedec0fec8c1240c3a0
SHA512

9df2054590245f6b58aae50427673f5c767e22fd06cbe8de73f8f325ffbfb5624d03acb92f58c0ae2f71434ec6c92c70f07de018f4eafa39c43f7536224ed6fe
SSDEEP

6144:p7h5/VSVAAWReBEqfQ7HRgAulHdM1hRg9ZR6D:3hVhAWKET1g1VdM1hRgLR6D

Score

N/A

Malware Config

Signatures

Files

320f23003b5276fc4955316bdb9bd72d5cd1edad0a330fedec0fec8c1240c3a0
.exe windows x86

36337c1942852967b8eb59cdbdac5ca7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasman

IsRasmanProcess
RasAddNotification
RasAllocateRoute
RasAddConnectionPort
RasActivateRouteEx

rasapi32

DwCloneEntry
RasSetSubEntryPropertiesW
RasValidateEntryNameW
RasValidateEntryNameA

kernel32

QueryPerformanceCounter
SetLastError
GetOEMCP
GetSystemTimeAsFileTime
CloseHandle
GetProcessHeap
HeapFree
GetLocaleInfoW
GetCurrentProcess
MultiByteToWideChar
GetUserDefaultLCID
GetVolumeInformationA
lstrlenA
FreeResource
CreateFileA
SetUnhandledExceptionFilter
WideCharToMultiByte
LockResource
GetCurrentProcessId
GetSystemDefaultLCID
lstrcpyA
GetLocalTime
GetTickCount
LoadResource
LoadLibraryW
SystemTimeToFileTime
QueryDosDeviceA
lstrcmpA
GetEnvironmentStringsW
HeapAlloc
DeviceIoControl
FindResourceA

rasdlg

GetRasDialOutProtocols
DwTerminalDlg
RasEntryDlgW
RasSrvIsConnectionConnected
RasUserPrefsDlg
RasSrvCleanupService
RasPhonebookDlgA
RasSrvHangupConnection
RasSrvAllowConnectionsConfig
RasSrvAddPropPages
RasUserGetManualDial
RasDialDlgW
RasUserEnableManualDial
RouterEntryDlgW
RasAutodialQueryDlgW
RasEntryDlgA
RasSrvInitializeService
RasPhonebookDlgW
RasDialDlgA
RasSrvEnumConnections
RasAutodialQueryDlgA
RouterEntryDlgA
RasSrvIsServiceRunning

raschap

RasEapGetInfo
RasCpGetInfo
RasCpEnumProtocolIds

rasctrs

CollectRasPerformanceData
OpenRasPerformanceData
CloseRasPerformanceData

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyW
RegQueryValueExA

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36337c1942852967b8eb59cdbdac5ca7

Headers

File Characteristics

Imports

rasman

rasapi32

kernel32

rasdlg

raschap

rasctrs

advapi32

Sections

.text Size: 101KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 21KB - Virtual size: 2.0MB

.zdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 101KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 21KB - Virtual size: 2.0MB

.zdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB