8ed6fbb2e2b558916947aff99854a5ece5b24de489e9e63b5edc328f7fd2e4fc

Sharing

Copy URL Twitter E-mail

General

Target

8ed6fbb2e2b558916947aff99854a5ece5b24de489e9e63b5edc328f7fd2e4fc
Size

216KB
MD5

0f60e6745443b55c08af016c2fd9f8a6
SHA1

541aa61f25846143968a6a54561a8fff8b0d187c
SHA256

8ed6fbb2e2b558916947aff99854a5ece5b24de489e9e63b5edc328f7fd2e4fc
SHA512

9e2056a0fa09a049318fb790f2bd5da59beb5929bb265c2dbf584b5aa78268ac149c0a878864af4cff71eccce9b789becfed7e10f88e93bad2b8927d1140d64d
SSDEEP

6144:TXhGDY8OfkQ95OO4HCrs3FCsVRBjzxq/sKaHMW:TiY8OMQ95OO1ytrf/KC

Score

N/A

Malware Config

Signatures

Files

8ed6fbb2e2b558916947aff99854a5ece5b24de489e9e63b5edc328f7fd2e4fc
.exe windows x86

3143381ba3d20de0cb506cc127e60965

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasdlg

RasSrvIsServiceRunning
RasAutodialQueryDlgA
RasEntryDlgW
DwTerminalDlg
RasUserEnableManualDial
RasPhonebookDlgA
RasSrvHangupConnection
RasUserGetManualDial
RasSrvInitializeService
RasSrvCleanupService
RasDialDlgA
RasSrvAddPropPages
RouterEntryDlgA
RasUserPrefsDlg
RouterEntryDlgW
RasSrvAllowConnectionsConfig
RasAutodialQueryDlgW
RasSrvIsConnectionConnected
RasPhonebookDlgW
RasEntryDlgA
GetRasDialOutProtocols
RasDialDlgW
RasSrvEnumConnections

rasapi32

RasValidateEntryNameW
RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry

kernel32

MultiByteToWideChar
GetTickCount
GetUserDefaultLCID
CloseHandle
lstrlenA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
SystemTimeToFileTime
GetVolumeInformationA
lstrcpyA
lstrcmpA
GetCurrentProcessId
LockResource
CreateFileA
HeapFree
SetUnhandledExceptionFilter
GetOEMCP
GetLocaleInfoW
FindResourceA
GetLocalTime
DeviceIoControl
QueryDosDeviceA
HeapAlloc
LoadResource
GetProcessHeap
WideCharToMultiByte
GetSystemDefaultLCID
SetLastError
LoadLibraryW
FreeResource
GetCurrentProcess

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegOpenKeyW

rasman

RasAddConnectionPort
RasAddNotification
IsRasmanProcess
RasAllocateRoute
RasActivateRouteEx

rasctrs

CloseRasPerformanceData
OpenRasPerformanceData
CollectRasPerformanceData

raschap

RasCpGetInfo
RasEapGetInfo
RasCpEnumProtocolIds

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 22KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3143381ba3d20de0cb506cc127e60965

Headers

File Characteristics

Imports

rasdlg

rasapi32

kernel32

advapi32

rasman

rasctrs

raschap

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 22KB - Virtual size: 2.0MB

.edata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 22KB - Virtual size: 2.0MB

.edata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB