9caea7d4345d9eb1f8a3a55d1eac1d9a70f2f387991ebcd19b8575670d50626c

General

Target

9caea7d4345d9eb1f8a3a55d1eac1d9a70f2f387991ebcd19b8575670d50626c
Size

211KB
MD5

19d84441566834ef9378cfc8d39f9f85
SHA1

512591098bf4f697b74325d764133f301dfeefed
SHA256

9caea7d4345d9eb1f8a3a55d1eac1d9a70f2f387991ebcd19b8575670d50626c
SHA512

23f563060fa95535e4c71583269d61eb4680a9405f11082622c3552598f4eec984f91a33f70f1aef2c51a86a1b81c0e82d3e6a9670135f6280c80c0679791a18
SSDEEP

6144:nBAwvYvaXY0EMRL6AxJiahBznhWJ5fahodBoL:nGOYvavVThhnh0b4L

Score

N/A

Malware Config

Signatures

Files

9caea7d4345d9eb1f8a3a55d1eac1d9a70f2f387991ebcd19b8575670d50626c
.exe windows x86

d1737ecf2838cea6a69bfdfddf0c3d8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
SetUnhandledExceptionFilter
LoadLibraryW
LockResource
GetEnvironmentStringsW
GetSystemTimeAsFileTime
lstrcpyA
WideCharToMultiByte
GetProcessHeap
HeapFree
GetLocaleInfoW
CloseHandle
QueryPerformanceCounter
HeapAlloc
GetCurrentProcess
lstrcmpA
LoadResource
CreateFileA
GetOEMCP
QueryDosDeviceA
FreeResource
SystemTimeToFileTime
FindResourceA
GetTickCount
DeviceIoControl
GetLocalTime
SetLastError
GetCurrentProcessId
MultiByteToWideChar
GetVolumeInformationA

rasman

RasAddConnectionPort
RasAllocateRoute
RasActivateRouteEx
IsRasmanProcess
RasAddNotification

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExA
RegOpenKeyW
RegQueryValueExA

rasctrs

CloseRasPerformanceData
OpenRasPerformanceData
CollectRasPerformanceData

rasapi32

DwCloneEntry
RasValidateEntryNameA
RasValidateEntryNameW
RasSetSubEntryPropertiesW

raschap

RasCpGetInfo
RasEapGetInfo
RasCpEnumProtocolIds

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 20KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1737ecf2838cea6a69bfdfddf0c3d8e

Headers

File Characteristics

Imports

kernel32

rasman

advapi32

rasctrs

rasapi32

raschap

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 72KB - Virtual size: 71KB

.hdata Size: 20KB - Virtual size: 2.0MB

.zdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 72KB - Virtual size: 71KB

.hdata
Size: 20KB - Virtual size: 2.0MB

.zdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB