Static task
static1
Behavioral task
behavioral1
Sample
Backdoor.Win32.Plite.exe
Resource
win7-20240221-en
General
-
Target
Backdoor.Win32.Plite.bhtq-15bde999568ca28ddb837ee8efaf6fdf82ac26b308f5d5d458b8a117d6be4d95
-
Size
320KB
-
MD5
c21f44df5cf3c5871cdb102e1758a935
-
SHA1
5e855c5691d74d09b560ebf4a3a662cc595d7d95
-
SHA256
15bde999568ca28ddb837ee8efaf6fdf82ac26b308f5d5d458b8a117d6be4d95
-
SHA512
56b8ecbaccb10806bf22e49b9e02d1cb48a3deecb698d9c29c54131cb929c4f5c8a14bb632725cbf66eb6ae5dd2ebc8f43e6707462588694a40ad4108d47eef6
-
SSDEEP
6144:PU0USPuHKKAsgBZg178Z+Snk6Fpwlw8RmuZSz8VdPbMK95BL7jGjFUHpJ+MBw:2SPXSzJSk6FpwlzmupVdjx5B/mFYJ+J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Backdoor.Win32.Plite.bhtq-15bde999568ca28ddb837ee8efaf6fdf82ac26b308f5d5d458b8a117d6be4d95
Files
-
Backdoor.Win32.Plite.bhtq-15bde999568ca28ddb837ee8efaf6fdf82ac26b308f5d5d458b8a117d6be4d95.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 310KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE