Plutonium (Revived Version)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Plutonium (Revived Version).exe
Size

30KB
MD5

b4b0a806539ce4e57892b69e284ede33
SHA1

68f9e1b800975521b189c93903467fa86fbf58b8
SHA256

d3b3a2b39ffb3bf03bfa33f48f4ec963328bdc9cc171648ce207415a53f2c69a
SHA512

266f6d120d0df46b36d8dd3b7ef88785def5ccd49aefac22466062c913dca08351538c98d23b6e0757bb084b99c3749fc67e9b1ced16438517b571bb201d2de6
SSDEEP

384:AFlc0G72IT0XiTM41RnpCCzBu8b20tBasyW6+12S3rwITp4fvC96uwMIokJ7E24G:T+ihpbBu+BaslEIrHu8H8tYcFwVc6K

Score

1^/10

Malware Config

Signatures

Files

Plutonium (Revived Version).exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ