Static task
static1
Behavioral task
behavioral1
Sample
Pluriform WebServices Setup (x64).exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Pluriform WebServices Setup (x64).exe
Resource
win10v2004-20230220-en
General
-
Target
Pluriform WebServices Setup (x64).exe
-
Size
2.8MB
-
MD5
d6fb2f59f88323eb97f85c13dc37531f
-
SHA1
057e30eb4f016636a90c4a3a2feb71acc133ca3b
-
SHA256
629ddf3c6aeff4be7d1a121858ba9979e9b7eb5f91a8e88bcf5f4bd244d0223c
-
SHA512
4b999c780d24194d7f1af01ef4d1a831d009fd44688412c778a8de4f000753cef0dc69077949f69693001c2262917d21844cf440a94fbe189dbda1cfd9271b4a
-
SSDEEP
49152:2z9AJ7lOzxm0EKgtFiGOGfFhlES77a+yv1MjNvuOR0mD3EMf2yN4yfL38a8:2CCzcpKGcADlESfa+yv1KjBEi2cxLO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Pluriform WebServices Setup (x64).exe
Files
-
Pluriform WebServices Setup (x64).exe.exe windows x64
83a12af15315baa73386693142056280
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
user32
LoadCursorW
SetWindowLongPtrW
GetWindowLongPtrW
SetCursor
EnableMenuItem
GetSystemMenu
MessageBoxExW
PostMessageW
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
SendMessageW
EnableWindow
GetParent
comctl32
CreatePropertySheetPageW
PropertySheetW
ole32
CoCreateGuid
CoInitialize
CoUninitialize
StringFromGUID2
kernel32
SetFilePointer
CloseHandle
GetLocalTime
GetModuleFileNameW
GetCommandLineW
GetTempPathW
GetDiskFreeSpaceExW
CreateDirectoryW
CreateFileW
GetFileAttributesW
CopyFileW
GetVersionExA
FreeLibrary
GetProcAddress
LoadLibraryW
WaitForSingleObject
GetFileInformationByHandle
SetFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToDosDateTime
DosDateTimeToFileTime
CreateFileA
SetFileAttributesW
GetFileAttributesA
DeleteFileA
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleW
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
EncodePointer
Sleep
HeapFree
HeapAlloc
CreateThread
GetCurrentThreadId
ExitThread
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
ReadFile
SetLastError
RtlPcToFileHeader
RaiseException
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetStdHandle
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EnterCriticalSection
LeaveCriticalSection
LCMapStringW
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
HeapReAlloc
HeapSize
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLastError
GetCurrentThread
GetCurrentProcess
LocalFree
LocalAlloc
WriteFile
LoadLibraryExA
GetFileSize
DecodePointer
GetStringTypeW
advapi32
OpenProcessToken
DuplicateToken
OpenThreadToken
AllocateAndInitializeSid
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
IsValidSecurityDescriptor
FreeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
AccessCheck
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 282KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ