PlainX[.]Crypter[.]zip

General

Target
PlainX.Crypter.zip
Size 13.0MB
Sample250127-wt52ys1ldl
SHA256 0bc0e4ad660c382f3291d9cff6e43e4e4f2a6875678b8557bf237f2ef5360eb8
MD5 e10e5d43fd0d1ffaff35f5992916204f
SHA1 8b0f6bbfdba45cf09a56b553a1684c5717f1cf2a
SHA512 4f85ee02468327eab59202f4db325437e9636f7104f751619f642cf7f3eadb34952132d64d55dfee6d7635d94b21b8dba0e35ba62af5856f69aa238bc080c1bb
SSDEEP 393216:SrNev055XcxGsyF37u/md7uB1tzfSyhMO:SrVjXUG3kmd7uB1tzfSyiO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PlainX Crypter.exe

File Explorer

PlainX.Crypter.zip

.zip 13.0MB
Guna.UI.dll

.dll 1.1MB
PlainX Crypter.exe

.exe 13.1MB

PlainX.Crypter.zip

SHA256 0bc0e4ad660c382f3291d9cff6e43e4e4f2a6875678b8557bf237f2ef5360eb8
MD5 e10e5d43fd0d1ffaff35f5992916204f
SHA1 8b0f6bbfdba45cf09a56b553a1684c5717f1cf2a
SHA512 4f85ee02468327eab59202f4db325437e9636f7104f751619f642cf7f3eadb34952132d64d55dfee6d7635d94b21b8dba0e35ba62af5856f69aa238bc080c1bb
SSDEEP 393216:SrNev055XcxGsyF37u/md7uB1tzfSyhMO:SrVjXUG3kmd7uB1tzfSyiO
MD5 SHA1 SHA512 SSDEEP

Guna.UI.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 576d2de2c9ef5bc1ea9bdd73ae8f408004260037c3b72227eed27e995166276d
MD5 8673eae95d67e5eb19f0eca3111408e8
SHA1 ad3e1ce93782537ffd3cd9e0bb9d30ae22d40ddb
SHA512 65c4eadf448a643f45fa9a0d91497bb25af404c41a3a32686d9e99ba4f4e50783d73f5b13d5df505cc62c465be300746d84a2eaa8000531893cd0b19d6436239
SSDEEP 24576:hUsmpWNSUFmCqJPNsTuJDYYviEcHy1t6Y:hSUQWSF8q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

3f:f5:b3:24:9f:84:88:19:f3:b5:45:4a:64:72:1b:3d:3f:77:2d:b4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Sobatdata Software

Chains

Mar 23, 2020

Minor OS version

0

Major OS version

4

Entry point

1136746

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Ilham-PC\Documents\Visual Studio 2015\Projects\Guna.UI\Guna.UI\bin\Release\build\.net 4.0\Guna.UI.pdb

PlainX Crypter.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 d087091be3376d85fc1d39523f82ebe1d01b7ac4e4d10f1855f374498fddcc71
MD5 e02070f24247621be04948fefe100a81
SHA1 e41afedf121e07b6598355562fdf5725a5dc4064
SHA512 ca39dbf2f1b9a6d3071e2d18e51ed9d5f222ed4155721faebcf72c2aad929607a027eaf5d1f0942d4c6827260ff3be6d2516e5d4f26a7fd0e53eb5e39a261dfc
SSDEEP 196608:M9dla9WjVQJz4JuRuVXt7teDDT5A0GJLz8o2Z/NA1cV1zoXfKNPqxTP6fHrCoz/B:M9dfdXtWDT5no2Z1Wcb0IPuC/r/ya+8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13531550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

PlainX.Crypter.zip

Guna.UI.dll

PE Signature issue

mscoree

dotnet

PlainX Crypter.exe

mscoree

dotnet

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

PlainX.Crypter.zip

Guna.UI.dll

PE Signature issue

mscoree

dotnet

PlainX Crypter.exe

mscoree

dotnet