PL[.][.]rar | Triage

Sharing

General

Target

PL..rar
Size

544KB
MD5

d93c61635050d9001ca5d674b26f700d
SHA1

cc4d69f45f23850da6c892ef77cdf8677f633139
SHA256

9d53228a6769b706acdb19165318752f58ad1f36cb24628a202372620eff57ee
SHA512

c7423c64e9fc3c91f9180f7f5796e847ab87a346a445e88c386ac79a228cff959338f0295c6eadc1332b0b35e5580b82b86cb754ce5428de7bd977450675146c
SSDEEP

12288:/8DdvVzB7vYeAxgr6OlrQu5hrX3ddDXReJ2iUIOxPEBUPLfjEiD4Omko:K9pA7OlrQgjNdDBeJxUBx8B27E04Om3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PL..exe

Files

PL..rar
.rar
PL..exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 932KB - Virtual size: 932KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ