1a7ee0755e1665328c3936f7e993e7ec9f6e173e15919ee46b29eff612626ea7

Sharing

Copy URL Twitter E-mail

General

Target

1a7ee0755e1665328c3936f7e993e7ec9f6e173e15919ee46b29eff612626ea7
Size

213KB
MD5

18b9cd3765174bdd0c10d78d67cb7fc2
SHA1

f299b287314172c352e234364491073c2cc2f0a6
SHA256

1a7ee0755e1665328c3936f7e993e7ec9f6e173e15919ee46b29eff612626ea7
SHA512

bc8ccd5f07c2b646523c7617920c09398188f62c0cca85109bb855f386606b8aacfef816ece41a0e1840e088f8a4c9f336726af9890c6cf7f8b5213a7668171c
SSDEEP

6144:p7h5/VSVAAWReBEqfQ7HRgAulHdM1hRg9ZR64:3hVhAWKET1g1VdM1hRgLR64

Score

N/A

Malware Config

Signatures

Files

1a7ee0755e1665328c3936f7e993e7ec9f6e173e15919ee46b29eff612626ea7
.exe windows x86

36337c1942852967b8eb59cdbdac5ca7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasman

IsRasmanProcess
RasAddNotification
RasAllocateRoute
RasAddConnectionPort
RasActivateRouteEx

rasapi32

DwCloneEntry
RasSetSubEntryPropertiesW
RasValidateEntryNameW
RasValidateEntryNameA

kernel32

QueryPerformanceCounter
SetLastError
GetOEMCP
GetSystemTimeAsFileTime
CloseHandle
GetProcessHeap
HeapFree
GetLocaleInfoW
GetCurrentProcess
MultiByteToWideChar
GetUserDefaultLCID
GetVolumeInformationA
lstrlenA
FreeResource
CreateFileA
SetUnhandledExceptionFilter
WideCharToMultiByte
LockResource
GetCurrentProcessId
GetSystemDefaultLCID
lstrcpyA
GetLocalTime
GetTickCount
LoadResource
LoadLibraryW
SystemTimeToFileTime
QueryDosDeviceA
lstrcmpA
GetEnvironmentStringsW
HeapAlloc
DeviceIoControl
FindResourceA

rasdlg

GetRasDialOutProtocols
DwTerminalDlg
RasEntryDlgW
RasSrvIsConnectionConnected
RasUserPrefsDlg
RasSrvCleanupService
RasPhonebookDlgA
RasSrvHangupConnection
RasSrvAllowConnectionsConfig
RasSrvAddPropPages
RasUserGetManualDial
RasDialDlgW
RasUserEnableManualDial
RouterEntryDlgW
RasAutodialQueryDlgW
RasEntryDlgA
RasSrvInitializeService
RasPhonebookDlgW
RasDialDlgA
RasSrvEnumConnections
RasAutodialQueryDlgA
RouterEntryDlgA
RasSrvIsServiceRunning

raschap

RasEapGetInfo
RasCpGetInfo
RasCpEnumProtocolIds

rasctrs

CollectRasPerformanceData
OpenRasPerformanceData
CloseRasPerformanceData

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyW
RegQueryValueExA

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36337c1942852967b8eb59cdbdac5ca7

Headers

File Characteristics

Imports

rasman

rasapi32

kernel32

rasdlg

raschap

rasctrs

advapi32

Sections

.text Size: 101KB - Virtual size: 100KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 21KB - Virtual size: 2.0MB

.zdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 101KB - Virtual size: 100KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 21KB - Virtual size: 2.0MB

.zdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB