PLP9A[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PLP9A.zip
Size

580KB
MD5

d92371edc0ed3a6fe87e783d0d6803f2
SHA1

5c63664d0091fd752bdd0c875508fa1d56d4f85e
SHA256

56e0205da738cb0636b3e0c6bb20721b2d0881d3eb21fbd47f284af425bd9ef6
SHA512

c3ad157b7281631feeac4b38d1402134cb1894375debd08f9ef05262cea58fa8a9bb85b3cd5d3a477138f5c13618efff3d371b2c37c4f8178e99ac671444bd48
SSDEEP

12288:FUyqcIvi9h4fOfcaSOCRSkEDGeacdP0JNzxW4I/L/:nlh4jiLhHL/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Activator.exe

Files

PLP9A.zip
.zip

Password: 123
Activator.exe
.exe windows:4 windows x86 arch:x86

Password: 123

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 1000KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 555KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
History.txt
Readme.txt