6bc791cc94ff3f66bf76af237b45c89c30685570ccbe482715d77de6a3ab546f

General

Target

6bc791cc94ff3f66bf76af237b45c89c30685570ccbe482715d77de6a3ab546f
Size

210KB
MD5

042e497da156860a3def15294b9c746e
SHA1

d87d98ed31d99a43db0bee1bb0d1ba7cde936784
SHA256

6bc791cc94ff3f66bf76af237b45c89c30685570ccbe482715d77de6a3ab546f
SHA512

86f2d16e1bd3185dbc2ff0e0e7eb95acf4a9fa32f5dcd55b1f094ad154670b0374441b155f66622e3f48770f78e0d30464db8c739576e251cc74e29c655fbdee
SSDEEP

3072:VUIiEDnBIgyRaq6MYfUwq+VoeqITaBwcysS4umRPI9elF2vRpEMnHnnT:XpDnDlvUwq+avILzkumu7vZ

Score

N/A

Malware Config

Signatures

Files

6bc791cc94ff3f66bf76af237b45c89c30685570ccbe482715d77de6a3ab546f
.exe windows x86

db8c24328f14bb0cabdb74af26eda055

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
QueryPerformanceCounter
GetOEMCP
lstrcpyA
CloseHandle
GetCurrentProcess
QueryDosDeviceA
GetLocaleInfoW
MultiByteToWideChar
LockResource
GetCurrentProcessId
GetEnvironmentStringsW
CreateFileA
GetSystemTimeAsFileTime
lstrcmpA
SetLastError
SetUnhandledExceptionFilter
GetLocalTime
FindResourceA
GetVolumeInformationA
lstrlenA
LoadLibraryW
WideCharToMultiByte
HeapFree
HeapAlloc
SystemTimeToFileTime
GetProcessHeap

rasman

RasAddConnectionPort
RasActivateRouteEx
RasAllocateRoute
IsRasmanProcess

rasctrs

CollectRasPerformanceData
CloseRasPerformanceData
OpenRasPerformanceData

advapi32

RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

rasapi32

RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW
RasValidateEntryNameA

raschap

RasCpEnumProtocolIds
RasEapGetInfo
RasCpGetInfo

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db8c24328f14bb0cabdb74af26eda055

Headers

File Characteristics

Imports

kernel32

rasman

rasctrs

advapi32

rasapi32

raschap

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 55KB - Virtual size: 54KB

.hdata Size: 21KB - Virtual size: 227KB

.qdata Size: 31KB - Virtual size: 31KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 55KB - Virtual size: 54KB

.hdata
Size: 21KB - Virtual size: 227KB

.qdata
Size: 31KB - Virtual size: 31KB

.rsrc
Size: 1KB - Virtual size: 1KB