pluto[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

pluto.exe
Size

1.2MB
MD5

edfdcc2d5cefa66c72fe9945ec73a0ca
SHA1

9b4d57803763e5740f6485146e8c8d29917b0217
SHA256

5544eb29737d5108df20c0974a4e085e117590895f95ea18abf0ffb2f1f7606e
SHA512

869dca776aa54618de7c981b9ce4fc5c6f34261e3e926b9037669716fb1e003bd3d70a3391ff23ad35980c2e0c4d5e548398dff2ca803e40c49a32e9897327b5
SSDEEP

24576:q8S04YNEMuExDiU6E5R9s8xY/2l/dRJ5dtsPxNGfTGIbt+rN:q04auS+UjfU2T/5XDSIbt+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pluto.exe

Files

pluto.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ