plextor-tool[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

plextor-tool.exe
Size

19KB
MD5

b5847d4b4207b7287be20d4564d372d9
SHA1

4dd5aa57b1b151c0de380fa5f870a945a3345394
SHA256

1e72a4ba6d2309f3974a671590a7c755f3a670c080f780db6f95d4822a3ee203
SHA512

e7495b44d31117889fa702a8184d68e2d8f51652c86ce6bdf527bf54dad7563a0a2742c10fb6ead2f55b17b869f2a58839f90c221851b6b52fa396903d4800fb
SSDEEP

384:vnnFvyLRQKifDn/l7UnCWVRJj+MukNOy25yOlyBZHSHb+YSKIcaMpr+Fko+:BmRQK2D/l4nhRJCPywaiXl+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
plextor-tool.exe

Files

plextor-tool.exe
.exe windows:4 windows x86

a904f10126ba5ddb502e482960217197

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

cygwin1

__main
atoi
calloc
cygwin_internal
dll_crt0__FP11per_process
exit
fprintf
free
malloc
memcpy
memset
printf
realloc
sprintf
strchr
strcmp
strncmp
strrchr

kernel32

CloseHandle
CreateEventA
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetVersionExA
HeapAlloc
LoadLibraryA
SetErrorMode
WaitForSingleObject

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE