Static task
static1
Behavioral task
behavioral1
Sample
LocalPayload.exe
Resource
win7-20240704-en
General
-
Target
LocalPayload.exe
-
Size
503KB
-
MD5
d12d881e83f3b915a733b7724199aeee
-
SHA1
4af168c62125d6023438b27644660d6c5ee7a973
-
SHA256
6eabc7a61b8d39e6622626963bc22f273d9f7516abbf9aeaecfe4bfb624fddc8
-
SHA512
1c7f86f680e29a0bf5c602734f3bc3f06b5fb9a129de586aab4cf91e7a3d5d54eecab7a44843ad79051dbc8b03a668364416db57c60b7451b1ee69d6c37a77bc
-
SSDEEP
12288:K+UzoiGRMDAs5kg4jOh9SyFot2wTvda7Eg1zC:ktv5kg4jOh9SyFoBrkAg1e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LocalPayload.exe
Files
-
LocalPayload.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 500KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ