PLP9A[.]zip | Triage™

General

Target
PLP9A.zip
Size 580KB
Sample260815-jxp4pasckg
SHA256 56e0205da738cb0636b3e0c6bb20721b2d0881d3eb21fbd47f284af425bd9ef6
MD5 d92371edc0ed3a6fe87e783d0d6803f2
SHA1 5c63664d0091fd752bdd0c875508fa1d56d4f85e
SHA512 c3ad157b7281631feeac4b38d1402134cb1894375debd08f9ef05262cea58fa8a9bb85b3cd5d3a477138f5c13618efff3d371b2c37c4f8178e99ac671444bd48
SSDEEP 12288:FUyqcIvi9h4fOfcaSOCRSkEDGeacdP0JNzxW4I/L/:nlh4jiLhHL/
TLSH
T194C4232718A94CE667D5503753F904ECCF62FB88BE8443817D5C57B883AE78E2B86C19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Activator.exe

File Explorer

PLP9A.zip

.zip 580KB
Activator.exe

.exe 602KB
History.txt

638B
Readme.txt

7KB

PLP9A.zip

SHA256 56e0205da738cb0636b3e0c6bb20721b2d0881d3eb21fbd47f284af425bd9ef6
MD5 d92371edc0ed3a6fe87e783d0d6803f2
SHA1 5c63664d0091fd752bdd0c875508fa1d56d4f85e
SHA512 c3ad157b7281631feeac4b38d1402134cb1894375debd08f9ef05262cea58fa8a9bb85b3cd5d3a477138f5c13618efff3d371b2c37c4f8178e99ac671444bd48
SSDEEP 12288:FUyqcIvi9h4fOfcaSOCRSkEDGeacdP0JNzxW4I/L/:nlh4jiLhHL/
TLSH
T194C4232718A94CE667D5503753F904ECCF62FB88BE8443817D5C57B883AE78E2B86C19
MD5 SHA1 SHA512 SSDEEP TLSH

Activator.exe

SHA256 ee6e3fc9bbba21693e29f5bdcf361fcd3ac540b126c3584f640e50f876d4e6b3
MD5 c5690e5045f49afda18ff9a0a1a8b42b
SHA1 3ef87607cece6132fb8ef100271880d176bb62aa
SHA512 276abdd89926d19c4398d08d4a29a1f4d4d9fce734376a73fe20d2c5583408b7605a347f9fe4c0699ae4c09fbd5f730dfdc67bb14d623b12693a54883c7fd08b
SSDEEP 12288:Di8kg48vcivO9h2farcamOCLSkghGkEct90JNBxWRoSes2:DiTVh2VyxPy1
TLSH
T1ADD412D226B98CD9E250DC78C5554EE85ACBEE0CDF3C3A71297C3B2C967C98A1B40C65
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1593472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

PLP9A.zip

Activator.exe

generic

History.txt

Readme.txt