Static task
static1
Behavioral task
behavioral1
Sample
plutonium.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
plutonium.exe
Resource
win10v2004-20240508-en
General
-
Target
plutonium.exe
-
Size
8.4MB
-
MD5
9538c0f300af74a9d9398e7683e8d714
-
SHA1
9064386d8b48ef75e7b92226274dae319f4200d8
-
SHA256
1b9135dbed914d08a6f3cb10402454c3bb4df784a7c81b97e03d0efdc62e9a87
-
SHA512
7c8008a8a04fe443ee8b2e4545fa569db12689da5bb50646e0d44ccf0065626b8f1ab6cd6a082595db07b4430cc44075707e8911c496b3c2f1f9cca02a476f4e
-
SSDEEP
196608:nAp+wQuLgtV0Sd6OdJ5KxRCYjZRqNkSIqKYOD2ufAVe:4+PndhsxdiNkSsv2ufAV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource plutonium.exe
Files
-
plutonium.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 8.3MB - Virtual size: 8.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ