52e816f35040ea0db8c99a9e6dc1afff79467ba1d54f2190dd9cbdbce82e7dc7

General

Target

52e816f35040ea0db8c99a9e6dc1afff79467ba1d54f2190dd9cbdbce82e7dc7
Size

210KB
MD5

0a3d12cd91db1b552ecb1b08053276f4
SHA1

f544ba3928ebd5ccd059fa2b1ce27f0f5bc8ae00
SHA256

52e816f35040ea0db8c99a9e6dc1afff79467ba1d54f2190dd9cbdbce82e7dc7
SHA512

008b3d1fb934c4521937d206eddad6e8403ffc7bdbf5ccda1d1073b2b4f71ab39787d921e2404d1ea26e8880f3458b52031b705ab6eaa17b22709fdd59235062
SSDEEP

3072:VUIiEDnBIgyRaq6MYfUwq+VoeqITaBwcysS4umRPI9elF2vRpEMnHu:XpDnDlvUwq+avILzkumu7vQ

Score

N/A

Malware Config

Signatures

Files

52e816f35040ea0db8c99a9e6dc1afff79467ba1d54f2190dd9cbdbce82e7dc7
.exe windows x86

db8c24328f14bb0cabdb74af26eda055

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
QueryPerformanceCounter
GetOEMCP
lstrcpyA
CloseHandle
GetCurrentProcess
QueryDosDeviceA
GetLocaleInfoW
MultiByteToWideChar
LockResource
GetCurrentProcessId
GetEnvironmentStringsW
CreateFileA
GetSystemTimeAsFileTime
lstrcmpA
SetLastError
SetUnhandledExceptionFilter
GetLocalTime
FindResourceA
GetVolumeInformationA
lstrlenA
LoadLibraryW
WideCharToMultiByte
HeapFree
HeapAlloc
SystemTimeToFileTime
GetProcessHeap

rasman

RasAddConnectionPort
RasActivateRouteEx
RasAllocateRoute
IsRasmanProcess

rasctrs

CollectRasPerformanceData
CloseRasPerformanceData
OpenRasPerformanceData

advapi32

RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

rasapi32

RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW
RasValidateEntryNameA

raschap

RasCpEnumProtocolIds
RasEapGetInfo
RasCpGetInfo

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 21KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db8c24328f14bb0cabdb74af26eda055

Headers

File Characteristics

Imports

kernel32

rasman

rasctrs

advapi32

rasapi32

raschap

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 55KB - Virtual size: 54KB

.hdata Size: 21KB - Virtual size: 227KB

.qdata Size: 31KB - Virtual size: 31KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 55KB - Virtual size: 54KB

.hdata
Size: 21KB - Virtual size: 227KB

.qdata
Size: 31KB - Virtual size: 31KB

.rsrc
Size: 1KB - Virtual size: 1KB