Behavioral task
behavioral1
Sample
a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe
Resource
win10v2004-20240226-en
General
-
Target
a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983
-
Size
2.7MB
-
MD5
7030a2e8aae462baa3355d5b1d9cf26a
-
SHA1
35651e4585de4cd8b82ff1f1dbf60766f6eacb7d
-
SHA256
a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983
-
SHA512
bdd8e3f5642640bf53f807b80a9787bd96ba44c377343bc586393b08528b77b6fc5a3bc697d1fa7272bedb463a0fd7edcb46c22e4352cee7aaeb1c3a4dc62755
-
SSDEEP
24576:74sn9+gS6uHk1U48v+hzy3cHoORwqetii6hsuiWZIkNSIzz/cKSc:dLS6uH8UZvHioh4PEr
Malware Config
Signatures
-
Detected Ploutus loader 1 IoCs
resource yara_rule sample family_ploutus -
Ploutus family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983
Files
-
a886775c2de8a82c7c7c3d44b932e5970529c62930931c80b91cd1f671ea1983.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ