plugplay[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

plugplay.exe
Size

191KB
MD5

5d2f695a174eb4d4bc88bae58115e0f3
SHA1

afc78ebe30ed38b5dad4e956282c7ca874652ffe
SHA256

248e2e74fc5085ee94856427bb4bb40fbe465070d821487f04628e9618fe2c68
SHA512

8c2bc1a1fa277ced8395c6d25264bad7238a73f7b97ef0c3dc52c034ec44e68de914da8dcb774341f1c26c5d9b530052987b5a3adad99163aa3498f29368e606
SSDEEP

1536:iJ68RTymYUxtwmyJTdAObB6W30SwiX8mvNriB3dtARl+Rq3ZfiKFYpV0s:MRGn4tAdF8iOy1wdtG8RqepV0s

Score

1^/10

Malware Config

Signatures

Files

plugplay.exe
.exe windows x64

57d79ad76b31dcc7c9ed6eafefffd634

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegisterServiceCtrlHandlerExW
SetServiceStatus
StartServiceCtrlDispatcherW

kernel32

CreateEventW
EnterCriticalSection
GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
InitializeConditionVariable
LeaveCriticalSection
RtlUnwind
SetEvent
SleepConditionVariableCS
WaitForSingleObject
WakeConditionVariable

ntdll

_vsnprintf

rpcrt4

I_RpcGetBuffer
NDRSContextUnmarshall
NdrConformantArrayFree
NdrConformantArrayUnmarshall
NdrConvert
NdrPointerBufferSize
NdrPointerFree
NdrPointerMarshall
NdrServerContextNewMarshall
NdrServerContextNewUnmarshall
NdrServerInitializeNew
RpcMgmtStopServerListening
RpcMgmtWaitServerListen
RpcRaiseException
RpcServerListen
RpcServerRegisterIf
RpcServerUnregisterIf
RpcServerUseProtseqEpA

ucrtbase

__acrt_iob_func
__p___argc
__p___wargv
__stdio_common_vsprintf
_configure_wide_argv
_get_initial_wide_environment
_initialize_wide_environment
_set_app_type
_strdup
calloc
exit
free
fwrite
getenv
malloc
memcmp
memcpy
memmove
strchr
strcmp
strcpy
strcspn
strlen

user32

BroadcastSystemMessageW

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 352B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57d79ad76b31dcc7c9ed6eafefffd634

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

ntdll

rpcrt4

ucrtbase

user32

Sections

.text Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 336B

.rdata Size: 4KB - Virtual size: 1KB

.pdata Size: 4KB - Virtual size: 552B

.xdata Size: 4KB - Virtual size: 476B

.bss Size: - Virtual size: 352B

.idata Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 92B

/4 Size: 4KB - Virtual size: 272B

/19 Size: 72KB - Virtual size: 70KB

/31 Size: 8KB - Virtual size: 5KB

/45 Size: 12KB - Virtual size: 9KB

/57 Size: 4KB - Virtual size: 3KB

/70 Size: 4KB - Virtual size: 1KB

/81 Size: 20KB - Virtual size: 18KB

/92 Size: 4KB - Virtual size: 2KB

.text
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 336B

.rdata
Size: 4KB - Virtual size: 1KB

.pdata
Size: 4KB - Virtual size: 552B

.xdata
Size: 4KB - Virtual size: 476B

.bss
Size: - Virtual size: 352B

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 92B

/4
Size: 4KB - Virtual size: 272B

/19
Size: 72KB - Virtual size: 70KB

/31
Size: 8KB - Virtual size: 5KB

/45
Size: 12KB - Virtual size: 9KB

/57
Size: 4KB - Virtual size: 3KB

/70
Size: 4KB - Virtual size: 1KB

/81
Size: 20KB - Virtual size: 18KB

/92
Size: 4KB - Virtual size: 2KB