Payload2024[.]vmp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payload2024.vmp.exe
Size

429KB
MD5

65f181d392338a2422af3028ad3bb17a
SHA1

cf99aa2ce952f1942b8940e5af19af04bc6123df
SHA256

b7848ca6869d93f71d795d31caa20e94993260e4cf6866c1b0cb2057f557447c
SHA512

7d0876c40791bcdbbfdeea3a0badc5cc5f149ec304def69ce3d6b63d27c0544f9d69f68ca0a99f76a548a873f7527ac73d0afd80923a023f7693e51c667228d5
SSDEEP

12288:xYgHx13HGYF9hGo2hnq5Zn6kmfHoCALu4NuMJvGsmLy6E:xZx1Wqsz79fHoT9NdQy6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payload2024.vmp.exe

Files

Payload2024.vmp.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.5V]
Size: - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.![T
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZbR
Size: 426KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ