PluginFlashexe[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PluginFlashexe.exe
Size

1.0MB
MD5

039a35282f6bdc426bb5df5990d16daa
SHA1

7465d0840358b7683ea6ee6dfcc4049906926046
SHA256

10214ec31eefe2eabd38262e9a404f781949bd09ff3831ffd3a9d9f9c8a277eb
SHA512

2eb8264c790a117962d8dd747fa89bced9382c8eb8f191a8d0ae0626b9af6b482e9cb1a995082b31434e484dd550c140548f03ed3894175117489bcc58736a1b
SSDEEP

12288:povIiGZq/sAEoRzQjsN5iOh6Byf7uWGNBrfcPIRqjWEX5fbEsGfFrwBwqyYrHlD9:pogSdksw9N+6CIOxDM+37fs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PluginFlashexe.exe

Files

PluginFlashexe.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ