aebbd616bea8ddf20380e23f8dd6de2a4d32e3e857a5800a5261edb407ee0b5a

General

Target

aebbd616bea8ddf20380e23f8dd6de2a4d32e3e857a5800a5261edb407ee0b5a
Size

210KB
MD5

1407da28e311b70055808e6f4d4e6f71
SHA1

b39dcec13dccf785f5df7d2f17bc26f08b17096b
SHA256

aebbd616bea8ddf20380e23f8dd6de2a4d32e3e857a5800a5261edb407ee0b5a
SHA512

581f424b859dde8de2269bdceb67c9ad1b8057e11d075247c44db79b9836c0526ddcbc71f3992e92f60e490c1b5b81b90e94684aeb68f24c2db581050a45a245
SSDEEP

3072:VUIiEDnBIgyRaq6MYfUwq+VoeqITaBwcysS4umRPI9elF2vRpEMnH6:XpDnDlvUwq+avILzkumu7vE

Score

N/A

Malware Config

Signatures

Files

aebbd616bea8ddf20380e23f8dd6de2a4d32e3e857a5800a5261edb407ee0b5a
.exe windows x86

db8c24328f14bb0cabdb74af26eda055

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
QueryPerformanceCounter
GetOEMCP
lstrcpyA
CloseHandle
GetCurrentProcess
QueryDosDeviceA
GetLocaleInfoW
MultiByteToWideChar
LockResource
GetCurrentProcessId
GetEnvironmentStringsW
CreateFileA
GetSystemTimeAsFileTime
lstrcmpA
SetLastError
SetUnhandledExceptionFilter
GetLocalTime
FindResourceA
GetVolumeInformationA
lstrlenA
LoadLibraryW
WideCharToMultiByte
HeapFree
HeapAlloc
SystemTimeToFileTime
GetProcessHeap

rasman

RasAddConnectionPort
RasActivateRouteEx
RasAllocateRoute
IsRasmanProcess

rasctrs

CollectRasPerformanceData
CloseRasPerformanceData
OpenRasPerformanceData

advapi32

RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

rasapi32

RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW
RasValidateEntryNameA

raschap

RasCpEnumProtocolIds
RasEapGetInfo
RasCpGetInfo

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db8c24328f14bb0cabdb74af26eda055

Headers

File Characteristics

Imports

kernel32

rasman

rasctrs

advapi32

rasapi32

raschap

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 55KB - Virtual size: 54KB

.hdata Size: 21KB - Virtual size: 227KB

.qdata Size: 31KB - Virtual size: 31KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 55KB - Virtual size: 54KB

.hdata
Size: 21KB - Virtual size: 227KB

.qdata
Size: 31KB - Virtual size: 31KB

.rsrc
Size: 1KB - Virtual size: 1KB