1fcbecb890af88146c01063689a9e0cd02e126f04d783fb187c6a92300cd2b27

Sharing

Copy URL Twitter E-mail

General

Target

1fcbecb890af88146c01063689a9e0cd02e126f04d783fb187c6a92300cd2b27
Size

24KB
MD5

057dd4bec6613761d3862e86666a5422
SHA1

f0dca8a20c1c1289a2a8de6098082ae4699c2607
SHA256

1fcbecb890af88146c01063689a9e0cd02e126f04d783fb187c6a92300cd2b27
SHA512

cdd2afc558e25c0bd978f92da2d7e195c223d7b55841531e54b3f9a73939004d1112e8db187814648343b5b0b1e862ebdd6996de332a6be852329f8933751765
SSDEEP

384:5Dp3HLfxVVh6Aaw/TEftIUQPFRn0bxIk6LA+Gy/T4WUksxo3dmcRjOBQt:pFzx0CEFIUxxf6VUkTRj9

Score

N/A

Malware Config

Signatures

Files

1fcbecb890af88146c01063689a9e0cd02e126f04d783fb187c6a92300cd2b27
.dll windows x86

2da2e530b81c392d0b4ccfde60a10ae4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
SetCurrentDirectoryA
GetComputerNameA
GetVersionExA
FreeLibrary
SetLastError
GetProcessHeap
GetFileAttributesA
GetLastError
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
lstrcmpiA
WideCharToMultiByte
GetCurrentDirectoryA
HeapAlloc
HeapFree
HeapReAlloc
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar

mpr

WNetCloseEnum
WNetCancelConnection2A
WNetAddConnection2A
WNetEnumResourceA
WNetOpenEnumA

user32

OemToCharA
CharToOemA

advapi32

RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

Exports

Exports

ClosePlugin
Configure
DeleteFiles
ExitFAR
FreeFindData
GetFindData
GetMinFarVersion
GetOpenPluginInfo
GetPluginInfo
OpenPlugin
ProcessEvent
ProcessKey
SetDirectory
SetStartupInfo

Sections

CODE
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INITDATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

EXITDATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2da2e530b81c392d0b4ccfde60a10ae4

Headers

File Characteristics

Imports

kernel32

mpr

user32

advapi32

Exports

Exports

Sections

CODE Size: 15KB - Virtual size: 16KB

DATA Size: 2KB - Virtual size: 8KB

INITDATA Size: 512B - Virtual size: 4KB

EXITDATA Size: 512B - Virtual size: 4KB

.idata Size: 1KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

CODE
Size: 15KB - Virtual size: 16KB

DATA
Size: 2KB - Virtual size: 8KB

INITDATA
Size: 512B - Virtual size: 4KB

EXITDATA
Size: 512B - Virtual size: 4KB

.idata
Size: 1KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB