C:\Users\ASUS\Downloads\Growtopia-AutoUnban-Console-master\Growtopia-AutoUnban-Console-master\Growtopia AutoUnban\obj\Debug\Prab AutoUnban Console.pdb
Behavioral task
behavioral1
Sample
2ec0f37835445d6ef64a0b300aaf47857d33fa579c21429edf354fd901dde84a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2ec0f37835445d6ef64a0b300aaf47857d33fa579c21429edf354fd901dde84a.exe
Resource
win10v2004-20240508-en
General
-
Target
2ec0f37835445d6ef64a0b300aaf47857d33fa579c21429edf354fd901dde84a.exe
-
Size
2.4MB
-
MD5
6da1aaed428a668be461e24877f5dc6c
-
SHA1
e456c6e727f732a807db2fcf68a539905c439755
-
SHA256
2ec0f37835445d6ef64a0b300aaf47857d33fa579c21429edf354fd901dde84a
-
SHA512
2f0a5446be4bee535977299ce4e24a4bb6b2bd0baceb6f1c07161be0c0e455cbffd9e16fbd176cf620795ed0b1c09b2ba44893f5757e8c261d307a11d54a2de7
-
SSDEEP
49152:tslzfIwk/KiN1jO2iO3wxRIQ6c+AACF2Wp4hFvJt/WGxUu:elzcRO2iO3wxmfvCF2zBt
Malware Config
Signatures
-
Detected Ploutus loader 1 IoCs
Processes:
resource yara_rule sample family_ploutus -
Ploutus family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2ec0f37835445d6ef64a0b300aaf47857d33fa579c21429edf354fd901dde84a.exe
Files
-
2ec0f37835445d6ef64a0b300aaf47857d33fa579c21429edf354fd901dde84a.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ