69b7a0775e976bdb50bb5f7f787c9cdfb8e76a7b35da0f7dd5e568b743f4d818

Sharing

Copy URL Twitter E-mail

General

Target

69b7a0775e976bdb50bb5f7f787c9cdfb8e76a7b35da0f7dd5e568b743f4d818
Size

217KB
MD5

21492988dd68c0e3cbe7fde9d2c5bfbf
SHA1

a4145b3391c8454785ebe5c21c669f8b59498d56
SHA256

69b7a0775e976bdb50bb5f7f787c9cdfb8e76a7b35da0f7dd5e568b743f4d818
SHA512

2b07dd1bb459f8baef9d6e5fdf47536bf30b4a79d49151ae080e85d731951e0e43f1247ddc6515fefcc9d1dd2225784efa5168fff2c8959a921717c0634d37b3
SSDEEP

6144:r51jJe1P3T5t6DJV/lV7Wx5R/QXB+P6cjGunLmaQVX++:3jJsP3T5t6DJ5LaEXQPVGuL1Qz

Score

N/A

Malware Config

Signatures

Files

69b7a0775e976bdb50bb5f7f787c9cdfb8e76a7b35da0f7dd5e568b743f4d818
.exe windows x86

80115f9e414eca8538654e73098b9860

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
LockResource
SetUnhandledExceptionFilter
QueryPerformanceCounter
HeapFree
GetOEMCP
GetSystemDefaultLCID
lstrcpyA
QueryDosDeviceA
MultiByteToWideChar
WideCharToMultiByte
GetVolumeInformationA
LoadResource
GetProcessHeap
GetTickCount
SetLastError
LoadLibraryW
lstrcmpA
HeapAlloc
lstrlenA
GetSystemTimeAsFileTime
GetCurrentProcess
CloseHandle
GetEnvironmentStringsW
GetLocalTime
DeviceIoControl
FreeResource
GetUserDefaultLCID
SystemTimeToFileTime
FindResourceA
GetCurrentProcessId
CreateFileA

rasdlg

RasEntryDlgW
RasUserPrefsDlg
RasPhonebookDlgW
RouterEntryDlgA
RasSrvIsServiceRunning
RasSrvEnumConnections
RasSrvCleanupService
RasAutodialQueryDlgW
RasSrvHangupConnection
RasDialDlgW
DwTerminalDlg
RasUserGetManualDial
GetRasDialOutProtocols
RouterEntryDlgW
RasDialDlgA
RasUserEnableManualDial
RasSrvAddPropPages
RasEntryDlgA
RasSrvInitializeService
RasSrvIsConnectionConnected
RasAutodialQueryDlgA
RasPhonebookDlgA
RasSrvAllowConnectionsConfig

rasman

RasAddNotification
IsRasmanProcess
RasAddConnectionPort
RasAllocateRoute
RasActivateRouteEx

advapi32

RegQueryValueExW
RegOpenKeyExA
RegOpenKeyW
RegCloseKey
RegQueryValueExA

rasapi32

RasSetSubEntryPropertiesW
RasValidateEntryNameA
DwCloneEntry
RasValidateEntryNameW

rasctrs

CloseRasPerformanceData
CollectRasPerformanceData
OpenRasPerformanceData

raschap

RasEapGetInfo
RasCpEnumProtocolIds
RasCpGetInfo

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 23KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80115f9e414eca8538654e73098b9860

Headers

File Characteristics

Imports

kernel32

rasdlg

rasman

advapi32

rasapi32

rasctrs

raschap

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 23KB - Virtual size: 2.0MB

.edata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 23KB - Virtual size: 2.0MB

.edata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB