188580391f1fccf176ae1d82b31a4768 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

188580391f1fccf176ae1d82b31a4768
Size

2KB
MD5

188580391f1fccf176ae1d82b31a4768
SHA1

2e9288c9d6b43fbded41a15ec90e1ca81fd2552d
SHA256

8dd1882d319e7451f0917f7dd90221bdb7d69681b5b0c5e0526acac40d83dd34
SHA512

ee85ab5ab5ff9e3771a9143651abb8b0f9432d3f10c4a641e023e78a3abbf2e8169ecc67de098928b7bd23068fb499daad8bd3553aa7a966d0c2bfbd3a9c7530

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Virus.WinHLP.Pluma.c

Files

188580391f1fccf176ae1d82b31a4768
.zip
Virus.WinHLP.Pluma.c
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ