plugx | 85c7975c0755b242ab0de2c68bad51a8f6cb0eb9f3ea2b2bdce9168d48043a06

Sharing

Copy URL

Twitter E-mail

General

Target

85c7975c0755b242ab0de2c68bad51a8f6cb0eb9f3ea2b2bdce9168d48043a06
Size

199KB
MD5

9a0cd65ba55d5446b2c83fb8b608ddce
SHA1

854eaee1a1c94cb13960ce99b43ac16e1fc6f06f
SHA256

85c7975c0755b242ab0de2c68bad51a8f6cb0eb9f3ea2b2bdce9168d48043a06
SHA512

4ef0f9255aaa5537f17f7ec2f6eb23714347baa90158637534077054e3144089936c0cf85f0f8b45ae28782c23e6b4dbf656afb13bf24aff092c45cace46a8fb
SSDEEP

3072:yxdhzkdi8t2Ix4uGDdj0kURx42f5RozA4iR4n0buJvduh1gyFOTO75:IZgi8uuGDd4kUU2fczANJyKeTi

Score

10^/10

plugx

Malware Config

Signatures

Plugx family
plugx

Files

85c7975c0755b242ab0de2c68bad51a8f6cb0eb9f3ea2b2bdce9168d48043a06
.dll windows x86

a06e0dd2a97f997cfd94538c695456fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess
SetUnhandledExceptionFilter
SetFileAttributesW
ReadProcessMemory
GetNativeSystemInfo
FileTimeToSystemTime
GetModuleHandleA
IsWow64Process
CloseHandle
GetStdHandle
Sleep
HeapAlloc
GetProcessHeap
DeviceIoControl
lstrlenW
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
WideCharToMultiByte
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetLastError
HeapFree
GetCommandLineA
GetCurrentThreadId
EncodePointer
DecodePointer
GetModuleHandleExW
MultiByteToWideChar
WriteFile
GetModuleFileNameW
IsProcessorFeaturePresent
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
OutputDebugStringW
GetStringTypeW
LCMapStringW
RtlUnwind
HeapReAlloc
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CreateFileW

user32

wsprintfW
wsprintfA

Exports

Exports

oWaqmCXSIrZn

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a06e0dd2a97f997cfd94538c695456fa

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 165KB - Virtual size: 165KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 6KB - Virtual size: 54KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 165KB - Virtual size: 165KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 6KB - Virtual size: 54KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 6KB - Virtual size: 5KB