Behavioral task
behavioral1
Sample
a499bc2a35f4e01110acfbd7fa2b65ab92ebac6c82f444b4c76ab7958de88a00.exe
Resource
win7-20230831-en
General
-
Target
a499bc2a35f4e01110acfbd7fa2b65ab92ebac6c82f444b4c76ab7958de88a00
-
Size
67KB
-
MD5
03df22a68013c5d442787000e72b15f0
-
SHA1
6258530ca3e9ba5c7f3198db4170495ec6a2a14b
-
SHA256
a499bc2a35f4e01110acfbd7fa2b65ab92ebac6c82f444b4c76ab7958de88a00
-
SHA512
d5a44a50b4a3813eda7d0a2dbfe18fe5a464c2ee34454319d2cfeaa46da59d3b9efb013a335b2613d28e4d9767b633fc8f88ff2b2acc747585d9d7df0846bd89
-
SSDEEP
768:q2XwwfJJj4JkuD3XMwseD2qwZ0WggCXG7quQK9HmBqj+i2kv+DzDM77+uMKbMH7E:X5JJjunzEC2uYsPhqRkI7yax
Malware Config
Signatures
-
Detected Ploutus loader 1 IoCs
Processes:
resource yara_rule sample family_ploutus -
Ploutus family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a499bc2a35f4e01110acfbd7fa2b65ab92ebac6c82f444b4c76ab7958de88a00
Files
-
a499bc2a35f4e01110acfbd7fa2b65ab92ebac6c82f444b4c76ab7958de88a00.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ