Plasmafree[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Plasmafree.exe
Size

16KB
MD5

5e7d759d515f007a1313aa86656ceb52
SHA1

b1913067c724de6ae0e01b3f2405b5f051586677
SHA256

d2f4a23b6c1fb5d906237083cb9f95601921f680a0fa5c45c41cf6a78802747a
SHA512

3df2656f2f88124fbb4f07aa75c6a092757f2dc438a651886157b60d78e7b29e8f90f9dd89c3e205462f09d4c5e001f0bb5192150f0db9bcf62b5d8c1cabe38b
SSDEEP

384:Gd3kwaTvn9G785shiL6nTzZfvwU+zWsptYcFwVc03K:GaTy85shiL6TlfvwFDtYcFwVc6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Plasmafree.exe

Files

Plasmafree.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\plasm\Downloads\code (2)\code\code\code\code\plasmaisud\PlasmaFree\obj\Debug\Plasmafree.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ