General
-
Target
web-cam-bruteforcer.exe
-
Size
219KB
-
MD5
7d9a324deca5ed7921a6f6af8ddd3f54
-
SHA1
7f5449ab2276babffa08ad0ba993eb9c3256d6fe
-
SHA256
79ab880662d138d41c42b4af1ccebdca197a7467302d6c06b43926b292c1a099
-
SHA512
2324357596b9336ff07b681e9317fe72440a4e664cec939d5c0b40637d63d83e8d405b6d7f82ae4ae59354d170de6c3366f82af98f88e54bdec7d8f819930ddd
-
SSDEEP
6144:TsRjzj2Tc/Qb1PMin3tk0biX9mhKwNGSaf0rovsys:T0fj2g/Q10i35OXbpS1
Malware Config
Signatures
-
Detected Ploutus loader 1 IoCs
resource yara_rule sample family_ploutus -
Ploutus family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource web-cam-bruteforcer.exe
Files
-
web-cam-bruteforcer.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ