ploutus | miflash_unlock_en_7[.]6[.]727[.]43_repacked[.]7z | Triage

Sharing

General

Target

miflash_unlock_en_7.6.727.43_repacked.7z
Size

57.3MB
MD5

fa0257ec31018ead1672a7ec6828761f
SHA1

7fbea6303c3768ee227eadfb2b327e704028cc9e
SHA256

14a551c56654fffdc58209b0f09643e72c2f3e1e73e19fbba1c94c9fa2eb0c7d
SHA512

c4a6c7c81430c1a50d7caefff4781e827958c9b2c64bd184a078ccd720c78c4037875155a838d9fbc896c0aeb90f3d20a01d6f72719e164d10a40faf159079d9
SSDEEP

1572864:kSW6Q+XlIsuFkS86gYmdk4Sz6Sa1Rpb1rZANAyI3v4i5bcy0xI:zIPk2gYZ6j1RpbguyI3v4itcy0m

Score

10^/10

ploutus

Malware Config

Signatures

Detected Ploutus loader 1 IoCs

resource	yara_rule
static1/unpack001/miflash_unlock_en_7.6.727.43_repacked.exe	family_ploutus

Ploutus family
ploutus

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/miflash_unlock_en_7.6.727.43_repacked.exe

Files

miflash_unlock_en_7.6.727.43_repacked.7z
.7z
miflash_unlock_en_7.6.727.43_repacked.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\SerGreen\Source\Repos\Appacker\Unpacker\obj\Release\Unpacker.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ