plugmanzx[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

plugmanzx.exe
Size

899KB
MD5

d58652b6bd76ac545da4b9dd4f70e032
SHA1

3a8274e1137b855b756a638b383aa1fe5f06b12b
SHA256

874f9ec9a67d5ecb2c131a9aa0c4738af6bc7be28dae7b47c797d8eecdd9961a
SHA512

b5c2ac8c1d810ccc38e0ad32270dec6c0630e42c64bd096521c6818121ff67a331015289d1c0c0ad61a6fd02d0b82d1455bda244b700125575d19cfcd1b940fd
SSDEEP

24576:NJtD/61ogATTzQ92eQCsYNkEIwcyENi0z:F6+gATT1CsYNkD9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
plugmanzx.exe

Files

plugmanzx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 896KB - Virtual size: 895KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ