Behavioral task
behavioral1
Sample
17889586f6ab151c704d3bcb4efdcdf2a4b18a71a0da0af9fb01558ff3903e65.exe
Resource
win7-20230831-en
General
-
Target
17889586f6ab151c704d3bcb4efdcdf2a4b18a71a0da0af9fb01558ff3903e65
-
Size
128KB
-
MD5
941cf1aed8916ebaf9e15023b245735f
-
SHA1
56a76ed490dc04909fec7fd23d1b9614c4da4d8d
-
SHA256
17889586f6ab151c704d3bcb4efdcdf2a4b18a71a0da0af9fb01558ff3903e65
-
SHA512
e73835215bef9e7fa801a43d45915898bdfefc1478809ebd56f616128fbd996d057b08d414eedcf6058d16026c54910bb4b9124e04eda88455ac8db76234e8b4
-
SSDEEP
1536:4LBwmEuY/BuTwTlEjMmXqCRkyzFS8gNP0NIi6bSQ8OoAKYDmZRM1UitZR1P:MNwTlEjMmaCRZzFPk2I111KYiI1Uk1P
Malware Config
Signatures
-
Detected Ploutus loader 1 IoCs
resource yara_rule sample family_ploutus -
Ploutus family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17889586f6ab151c704d3bcb4efdcdf2a4b18a71a0da0af9fb01558ff3903e65
Files
-
17889586f6ab151c704d3bcb4efdcdf2a4b18a71a0da0af9fb01558ff3903e65.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ