Static task
static1
Behavioral task
behavioral1
Sample
DeadPayload.exe
Resource
win7-20240903-en
General
-
Target
DeadPayload.exe
-
Size
500KB
-
MD5
32a460b41d3309d8fd5512dce58357d9
-
SHA1
b83e6686de15c57184ae8b8be80d0b5b323f3712
-
SHA256
0287c741bae11fcfebf9f7d81b1f663379f531855ef381faecdc006ef689c25c
-
SHA512
dc8e37a4aa54519b7578247b9a95b70a446667c15f799ba30dcf14a49858ed2dfa79287476532f62d7e6c44de372dd9035e5d881794c7266dab31c6955fd15e4
-
SSDEEP
12288:f3DTkV1ilKya0FOUuQ0gH+kmtbF6W05EJXp107sd7:3kGTy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DeadPayload.exe
Files
-
DeadPayload.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 497KB - Virtual size: 497KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ