LocalPayload[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LocalPayload.exe
Size

230KB
MD5

9c675f1eb472f2254945bc9cb3dc2458
SHA1

4c3ad2feb5525c7e916552014fd61f5950ffe4af
SHA256

fbd5e83ce1f2c60b41c454c40b956264a274af32ab1f0fa5516411fe87ecd3d6
SHA512

4a084c473892cef8c36df616935da9e22598b0796302822256e500e2d80f7e17397ebb24eaabcd72c065e1d23df9993e92fe31e3ccb8bef30d7aac65d656852f
SSDEEP

3072:NPToZQ7rEXx9k24HB9v6m6e8JVRWZvT2ht8Cawo/UQxT8e1ZsFOKE6r2mFi:9ToZQcIVn76e8JQL28go/B8e1SZy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LocalPayload.exe

Files

LocalPayload.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ