Static task
static1
General
-
Target
DeadPayload.exe
-
Size
500KB
-
MD5
4a074763fefc39705063179d602cb366
-
SHA1
e5014b2f025c9fa8a58f265fe4233c2774095496
-
SHA256
a52cdd40e995d838593804e964976362151e99bb7ee2400368c854c32960a104
-
SHA512
79ad341501fd56e7c542344ded704fa2fb8368a97bfca3f0d0b38ecb8cdc1f7f685a58095cd225b047c1abb972ff34ddcf996c54d2c607998868b24cd078d45e
-
SSDEEP
12288:f3DTkV1ilKya0FOUuQ0gH+kmtbF6W05EJXp107sd7:3kGTy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DeadPayload.exe
Files
-
DeadPayload.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 497KB - Virtual size: 497KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ