plu[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

plu.dll
Size

77KB
MD5

9490941f106ce4a4b06e48db89eaad79
SHA1

57f3fb14b33aa4dc242641df0cc0f7d92a1f059f
SHA256

53eb4d0366998258355d9576f12c4a806aeac39a89c0aa3cc89f47b4e8eb4893
SHA512

9f37a4308f7e0766482b9aec2904f3f485504453754b447022c2ccd2cd896734ab7cf7a8e3fedddb68e2175be5c58d4b653b339e12431998120afc90b5cef857
SSDEEP

1536:cEBbOZKPsLAbiKy2RHSzP2cJNVQ7DHGwi:rB6a5JRHSzrO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
plu.dll

Files

plu.dll
.dll windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ