8b68e69630ae82d799d50ee5b75aa16bc844cf6d23a8fbb91e7c7b7cabe1a0b5

Sharing

Copy URL Twitter E-mail

General

Target

8b68e69630ae82d799d50ee5b75aa16bc844cf6d23a8fbb91e7c7b7cabe1a0b5
Size

212KB
MD5

4fde171611080a7e504f633e34a3bfb6
SHA1

2470324a1d73954ede9f770073f0920303e8a219
SHA256

8b68e69630ae82d799d50ee5b75aa16bc844cf6d23a8fbb91e7c7b7cabe1a0b5
SHA512

7b7c42ad57976b7a587ba4afbc6bb20dbafe1210eb143d0456141f2b434719d5f40bfb43277159330cab9d09db938863a61fd92d250f5f5a49c453bd15102815
SSDEEP

6144:gPUZ1jxhINfRN02uxJekQ4ARtXFWuVD1GbNA/:gPSTuDwx0kQjtXFWuR1GbO/

Score

N/A

Malware Config

Signatures

Files

8b68e69630ae82d799d50ee5b75aa16bc844cf6d23a8fbb91e7c7b7cabe1a0b5
.exe windows x86

ab4aa11ae8320ead77ce7c7b320b7775

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
GetProcessHeap
GetOEMCP
LoadLibraryW
lstrlenA
CloseHandle
GetEnvironmentStringsW
GetUserDefaultLCID
GetCurrentProcess
GetSystemDefaultLCID
HeapFree
lstrcmpA
FreeResource
LockResource
MultiByteToWideChar
CreateFileA
LoadResource
FindResourceA
QueryPerformanceCounter
GetLocalTime
HeapAlloc
GetCurrentProcessId
SetUnhandledExceptionFilter
lstrcpyA
WideCharToMultiByte
GetLocaleInfoW
DeviceIoControl
QueryDosDeviceA
GetVolumeInformationA
GetTickCount
GetSystemTimeAsFileTime
SetLastError

raschap

RasCpEnumProtocolIds
RasEapGetInfo
RasCpGetInfo

rasctrs

CloseRasPerformanceData
OpenRasPerformanceData
CollectRasPerformanceData

rasman

RasAddNotification
IsRasmanProcess
RasActivateRouteEx
RasAddConnectionPort
RasAllocateRoute

rasdlg

RasPhonebookDlgW
DwTerminalDlg
GetRasDialOutProtocols
RasSrvAddPropPages
RouterEntryDlgW
RasUserGetManualDial
RasAutodialQueryDlgA
RasSrvIsConnectionConnected
RouterEntryDlgA
RasSrvHangupConnection
RasDialDlgW
RasSrvIsServiceRunning
RasUserPrefsDlg
RasUserEnableManualDial
RasAutodialQueryDlgW
RasSrvInitializeService
RasEntryDlgW
RasSrvCleanupService
RasSrvAllowConnectionsConfig
RasPhonebookDlgA
RasDialDlgA
RasEntryDlgA
RasSrvEnumConnections

rasapi32

RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW

advapi32

RegOpenKeyExA
RegOpenKeyW
RegQueryValueExA
RegCloseKey
RegQueryValueExW

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab4aa11ae8320ead77ce7c7b320b7775

Headers

File Characteristics

Imports

kernel32

raschap

rasctrs

rasman

rasdlg

rasapi32

advapi32

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 21KB - Virtual size: 2.0MB

.zdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 21KB - Virtual size: 2.0MB

.zdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB