4ad6e3e34525f5828660d183bf7dd0b8029ed515f216d4bd9d1f4a0bad50fd81

General

Target

4ad6e3e34525f5828660d183bf7dd0b8029ed515f216d4bd9d1f4a0bad50fd81
Size

209KB
MD5

1387658605139fd1631525780b09d85c
SHA1

e440d9db238323e80b554ea9194ee88ba348ea9c
SHA256

4ad6e3e34525f5828660d183bf7dd0b8029ed515f216d4bd9d1f4a0bad50fd81
SHA512

28ba0171ba594a39d70e9a2b0a556fd061388b8d9df0b51ca95728374b226c543f126fd3cc9f25267831ae5130a147406503cfdfabfa3be31bed9ae1704d56f5
SSDEEP

3072:nPAbXPyC8+H0sfBS7QsKSrpxdYvqsSiD7cYV96RSvlUr53lH58WaKiuXfi8PeA+o:IXPbhHFpSp/9xdY9Siv96YvlUBl/zCW

Score

N/A

Malware Config

Signatures

Files

4ad6e3e34525f5828660d183bf7dd0b8029ed515f216d4bd9d1f4a0bad50fd81
.exe windows x86

06ba45096e234d3614a93dd22606d68e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
LockResource
CloseHandle
WideCharToMultiByte
QueryDosDeviceA
SetLastError
FindResourceA
SystemTimeToFileTime
GetEnvironmentStringsW
GetTickCount
QueryPerformanceCounter
HeapAlloc
GetSystemTimeAsFileTime
CreateFileA
lstrcpyA
GetOEMCP
GetLocaleInfoW
GetLocalTime
GetVolumeInformationA
lstrlenA
LoadLibraryW
GetCurrentProcess
lstrcmpA
MultiByteToWideChar
HeapFree
DeviceIoControl
GetProcessHeap
LoadResource
SetUnhandledExceptionFilter
FreeResource

rasman

RasActivateRouteEx
RasAddConnectionPort
RasAllocateRoute
RasAddNotification
IsRasmanProcess

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyW
RegQueryValueExA
RegOpenKeyExA

rasapi32

DwCloneEntry
RasValidateEntryNameA
RasSetSubEntryPropertiesW
RasValidateEntryNameW

raschap

RasCpGetInfo
RasEapGetInfo
RasCpEnumProtocolIds

rasctrs

OpenRasPerformanceData
CloseRasPerformanceData
CollectRasPerformanceData

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 17KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06ba45096e234d3614a93dd22606d68e

Headers

File Characteristics

Imports

kernel32

rasman

advapi32

rasapi32

raschap

rasctrs

Sections

.text Size: 102KB - Virtual size: 101KB

.rdata Size: 72KB - Virtual size: 71KB

.hdata Size: 17KB - Virtual size: 165KB

.cdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 102KB - Virtual size: 101KB

.rdata
Size: 72KB - Virtual size: 71KB

.hdata
Size: 17KB - Virtual size: 165KB

.cdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB