General

  • Target

    Bo2Pluto.zip

  • Size

    4.5MB

  • MD5

    0be457508c75985ddd4d9e19ea92fe58

  • SHA1

    2f132f52623ba15dc58ab0c21012634e30a2ddb4

  • SHA256

    366279ac229f11be994bd2954f70cc00ed2aa0880c6bbca2449b082915c31d0b

  • SHA512

    e0281d7b45b4f681f951fe8270d0867bd7f8b9d26d5d0944f57ec9e0c681d76cc937d83dda8822c69a425c9496b0018c185080f89a26e9b02fdb7b5fefc265eb

  • SSDEEP

    98304:dbfAOchO4K9g7xgqgHfh8J78+oQccWYXH/PAXm/smQZiWTWLvpyQ8p2gjsGTcXI:dbfAOchgIGqgH2JNXcoImUEWwvB8ouxb

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Bo2Pluto.zip
    .zip
  • Bo2Pluto/BO2Pluto.dll
    .dll windows:6 windows x86 arch:x86

    950528327c399fca08291fba8827c8b7


    Headers

    Imports

    Sections

  • Bo2Pluto/BO2Pluto.zip
    .zip
  • BO2Pluto.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections