pls-donate-utils-1[.]1[.]5[.]zip | Triage

Resubmissions

15/10/2023, 14:11

231015-rhbazshe95 3

15/10/2023, 14:08

231015-rfqmwshe76 3

Sharing

Copy URL Twitter E-mail

General

Target

pls-donate-utils-1.1.5.zip
Size

55KB
MD5

feb224b0443d5177dd6551005c897f8f
SHA1

c3b2181aca3b12bb4eb4d981785296eeb31f9703
SHA256

7cf370b2770bb403cebfbd094724b79acef5b5f130177ff5c66ef04880ee5faa
SHA512

240b8f6b26b59bd88738e63312d4b6fd5e4700f3ce6784cc8e1aabca6ce8a1036c482b809b7bdb17fd896abc73690fccc6437babc1ff849c12c76c6452d17c35
SSDEEP

1536:XSb5uGK3waK6l8bx8ToB/OpT0AWITMUFvtyURV8y:XSduD3KxaoFOOAhtyUUy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/pls-donate-utils-1.1.5/RAMDecrypt/RAMDecrypt.exe

Files

pls-donate-utils-1.1.5.zip
.zip
pls-donate-utils-1.1.5/Donation.png
.png
pls-donate-utils-1.1.5/RAMDecrypt/RAMDecrypt.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pls-donate-utils-1.1.5/RAMDecrypt/README.md
pls-donate-utils-1.1.5/README.md
pls-donate-utils-1.1.5/js/addToken.js
.js
pls-donate-utils-1.1.5/js/all.js
.js
pls-donate-utils-1.1.5/js/avatar.js
.js
pls-donate-utils-1.1.5/js/gamepass.js
.js
pls-donate-utils-1.1.5/js/import.js
.js
pls-donate-utils-1.1.5/js/product.js
.js
pls-donate-utils-1.1.5/js/removeToken.js
.js
pls-donate-utils-1.1.5/js/robuxAmount.js
.js
pls-donate-utils-1.1.5/js/tokenList.js
.js
pls-donate-utils-1.1.5/js/transfer.js
.js
pls-donate-utils-1.1.5/js/updater.js
pls-donate-utils-1.1.5/package-lock.json
pls-donate-utils-1.1.5/package.json
pls-donate-utils-1.1.5/run.bat