255a6dcacd4437bd5ee1ec353186f84f4e2c6971a6e935d5075a07282fc567e9

Sharing

Copy URL

Twitter E-mail

General

Target

255a6dcacd4437bd5ee1ec353186f84f4e2c6971a6e935d5075a07282fc567e9
Size

211KB
MD5

14cd57f047587ea939d7c8a8142a6d37
SHA1

f0363caacc3cc3db6fd8f76c9824a97d62c6b38a
SHA256

255a6dcacd4437bd5ee1ec353186f84f4e2c6971a6e935d5075a07282fc567e9
SHA512

c96eb1d66a7b936fde3d61f90709024bfb30d46b70fcb79105578e9b67828256123deda94bd9f27e54653bcbdbb990bd747e7eb88eab8231e5cd3200d94226a9
SSDEEP

3072:wfScor+JLpBm4J0hZZ2GBUUlSIQsXb2kjfz9rso0m2afyugqFCCbZSuUtsooqI3U:A7UDh5zQsXbhlA9mDyd3LuUCooT2Uk1

Score

N/A

Malware Config

Signatures

Files

255a6dcacd4437bd5ee1ec353186f84f4e2c6971a6e935d5075a07282fc567e9
.exe windows x86

93813980d0c152322cfe4fcf026392ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasdlg

RouterEntryDlgW
GetRasDialOutProtocols
RasSrvAddPropPages
RasAutodialQueryDlgA
RasSrvInitializeService
RasEntryDlgA
RasPhonebookDlgW
RasSrvAllowConnectionsConfig
RasUserPrefsDlg
RasSrvIsConnectionConnected
RasSrvHangupConnection
RasUserEnableManualDial
RasAutodialQueryDlgW
RasDialDlgW
RasEntryDlgW
RasDialDlgA
RasSrvEnumConnections
RasSrvIsServiceRunning
RasUserGetManualDial
RasPhonebookDlgA
DwTerminalDlg
RasSrvCleanupService
RouterEntryDlgA

kernel32

MultiByteToWideChar
WideCharToMultiByte
LockResource
GetEnvironmentStringsW
FindResourceA
lstrcpyA
CreateFileA
LoadLibraryW
lstrcmpA
GetLocaleInfoW
HeapFree
GetSystemTimeAsFileTime
FreeResource
SystemTimeToFileTime
QueryDosDeviceA
LoadResource
GetVolumeInformationA
CloseHandle
HeapAlloc
GetSystemDefaultLCID
GetLocalTime
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcessId
lstrlenA
QueryPerformanceCounter
DeviceIoControl
GetTickCount
GetUserDefaultLCID
GetOEMCP
GetProcessHeap
GetCurrentProcess

advapi32

RegOpenKeyExA
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegQueryValueExA

rasctrs

CollectRasPerformanceData
OpenRasPerformanceData
CloseRasPerformanceData

raschap

RasCpEnumProtocolIds
RasCpGetInfo
RasEapGetInfo

rasapi32

RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW

rasman

IsRasmanProcess
RasActivateRouteEx
RasAddConnectionPort
RasAddNotification
RasAllocateRoute

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 18KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93813980d0c152322cfe4fcf026392ca

Headers

File Characteristics

Imports

rasdlg

kernel32

advapi32

rasctrs

raschap

rasapi32

rasman

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 73KB - Virtual size: 72KB

.hdata Size: 18KB - Virtual size: 2.0MB

.edata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 73KB - Virtual size: 72KB

.hdata
Size: 18KB - Virtual size: 2.0MB

.edata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB