4a41374c5af4e007cddb5ea6d9bd65e67a6ec28cb88280581cd1fcbca2228054

Sharing

Copy URL Twitter E-mail

General

Target

4a41374c5af4e007cddb5ea6d9bd65e67a6ec28cb88280581cd1fcbca2228054
Size

213KB
MD5

031bdb1aca3452cc99db16cdb7093a83
SHA1

b209eedf15c20b61214cc9863daa19f02a26b7c8
SHA256

4a41374c5af4e007cddb5ea6d9bd65e67a6ec28cb88280581cd1fcbca2228054
SHA512

2de8b803509f00f576c2ad873bf59a29ee47eb0d6688656472d35445d2ba15cd9bcc5c56461724565837bec03520aa9255e0803b7c8205e772b0b4f2560c62ff
SSDEEP

6144:p7h5/VSVAAWReBEqfQ7HRgAulHdM1hRg9ZR62:3hVhAWKET1g1VdM1hRgLR62

Score

N/A

Malware Config

Signatures

Files

4a41374c5af4e007cddb5ea6d9bd65e67a6ec28cb88280581cd1fcbca2228054
.exe windows x86

36337c1942852967b8eb59cdbdac5ca7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasman

IsRasmanProcess
RasAddNotification
RasAllocateRoute
RasAddConnectionPort
RasActivateRouteEx

rasapi32

DwCloneEntry
RasSetSubEntryPropertiesW
RasValidateEntryNameW
RasValidateEntryNameA

kernel32

QueryPerformanceCounter
SetLastError
GetOEMCP
GetSystemTimeAsFileTime
CloseHandle
GetProcessHeap
HeapFree
GetLocaleInfoW
GetCurrentProcess
MultiByteToWideChar
GetUserDefaultLCID
GetVolumeInformationA
lstrlenA
FreeResource
CreateFileA
SetUnhandledExceptionFilter
WideCharToMultiByte
LockResource
GetCurrentProcessId
GetSystemDefaultLCID
lstrcpyA
GetLocalTime
GetTickCount
LoadResource
LoadLibraryW
SystemTimeToFileTime
QueryDosDeviceA
lstrcmpA
GetEnvironmentStringsW
HeapAlloc
DeviceIoControl
FindResourceA

rasdlg

GetRasDialOutProtocols
DwTerminalDlg
RasEntryDlgW
RasSrvIsConnectionConnected
RasUserPrefsDlg
RasSrvCleanupService
RasPhonebookDlgA
RasSrvHangupConnection
RasSrvAllowConnectionsConfig
RasSrvAddPropPages
RasUserGetManualDial
RasDialDlgW
RasUserEnableManualDial
RouterEntryDlgW
RasAutodialQueryDlgW
RasEntryDlgA
RasSrvInitializeService
RasPhonebookDlgW
RasDialDlgA
RasSrvEnumConnections
RasAutodialQueryDlgA
RouterEntryDlgA
RasSrvIsServiceRunning

raschap

RasEapGetInfo
RasCpGetInfo
RasCpEnumProtocolIds

rasctrs

CollectRasPerformanceData
OpenRasPerformanceData
CloseRasPerformanceData

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyW
RegQueryValueExA

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36337c1942852967b8eb59cdbdac5ca7

Headers

File Characteristics

Imports

rasman

rasapi32

kernel32

rasdlg

raschap

rasctrs

advapi32

Sections

.text Size: 101KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 21KB - Virtual size: 2.0MB

.zdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 101KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 21KB - Virtual size: 2.0MB

.zdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB