DeadPlates-MalwareSample.zip
- SHA256 ed33b03df3b54da299df5b2452ecf637ca91b46325fa9e318a6fbff92f498a20
Overview
overview
3Static
static
3Game.exe
windows10-ltsc_2021-x64
3Game.exe
windows11-21h2-x64
3Game.exe
windows10-ltsc_2021-x64
1Game.exe
windows11-21h2-x64
1d3dcompiler_47.dll
windows10-ltsc_2021-x64
3d3dcompiler_47.dll
windows11-21h2-x64
3ffmpegsumo.dll
windows10-ltsc_2021-x64
3ffmpegsumo.dll
windows11-21h2-x64
3libEGL.dll
windows10-ltsc_2021-x64
3libEGL.dll
windows11-21h2-x64
3libGLESv2.dll
windows10-ltsc_2021-x64
3libGLESv2.dll
windows11-21h2-x64
3notificati...er.exe
windows10-ltsc_2021-x64
1notificati...er.exe
windows11-21h2-x64
1nwjc.exe
windows10-ltsc_2021-x64
1nwjc.exe
windows11-21h2-x64
1payload.exe
windows10-ltsc_2021-x64
1payload.exe
windows11-21h2-x64
1pdf.dll
windows10-ltsc_2021-x64
3pdf.dll
windows11-21h2-x64
3vk_swiftshader.dll
windows10-ltsc_2021-x64
1vk_swiftshader.dll
windows11-21h2-x64
1vulkan-1.dll
windows10-ltsc_2021-x64
1vulkan-1.dll
windows11-21h2-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Game.exe
Resource
win10ltsc2021-20251017-en
Behavioral task
behavioral2
Sample
Game.exe
Resource
win11-20251015-en
Behavioral task
behavioral3
Sample
Game.exe
Resource
win10ltsc2021-20251017-en
Behavioral task
behavioral4
Sample
Game.exe
Resource
win11-20251015-en
Behavioral task
behavioral5
Sample
d3dcompiler_47.dll
Resource
win10ltsc2021-20250619-en
Behavioral task
behavioral6
Sample
d3dcompiler_47.dll
Resource
win11-20251015-en
Behavioral task
behavioral7
Sample
ffmpegsumo.dll
Resource
win10ltsc2021-20251017-en
Behavioral task
behavioral8
Sample
ffmpegsumo.dll
Resource
win11-20251015-en
Behavioral task
behavioral9
Sample
libEGL.dll
Resource
win10ltsc2021-20250610-en
Behavioral task
behavioral10
Sample
libEGL.dll
Resource
win11-20250502-en
Behavioral task
behavioral11
Sample
libGLESv2.dll
Resource
win10ltsc2021-20251017-en
Behavioral task
behavioral12
Sample
libGLESv2.dll
Resource
win11-20250619-en
Behavioral task
behavioral13
Sample
notification_helper.exe
Resource
win10ltsc2021-20251017-en
Behavioral task
behavioral14
Sample
notification_helper.exe
Resource
win11-20251015-en
Behavioral task
behavioral15
Sample
nwjc.exe
Resource
win10ltsc2021-20251017-en
Behavioral task
behavioral16
Sample
nwjc.exe
Resource
win11-20251015-en
Behavioral task
behavioral17
Sample
payload.exe
Resource
win10ltsc2021-20251017-en
Behavioral task
behavioral18
Sample
payload.exe
Resource
win11-20251015-en
Behavioral task
behavioral19
Sample
pdf.dll
Resource
win10ltsc2021-20251017-en
Behavioral task
behavioral20
Sample
pdf.dll
Resource
win11-20251015-en
Behavioral task
behavioral21
Sample
vk_swiftshader.dll
Resource
win10ltsc2021-20251017-en
Behavioral task
behavioral22
Sample
vk_swiftshader.dll
Resource
win11-20250619-en
Behavioral task
behavioral23
Sample
vulkan-1.dll
Resource
win10ltsc2021-20251017-en
Behavioral task
behavioral24
Sample
vulkan-1.dll
Resource
win11-20251015-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Game.exe |
| unpack001/Game.exe.exe |
| unpack001/ffmpegsumo.dll |
| unpack001/libEGL.dll |
| unpack001/libGLESv2.dll |
| unpack001/notification_helper.exe |
| unpack001/nwjc.exe |
| unpack001/payload.exe |
| unpack001/pdf.dll |
| unpack001/vk_swiftshader.dll |
| unpack001/vulkan-1.dll |
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=225, version=20806,
count=17, id=199, version=41118,
count=96, id=223, productName=VS2013 build 21005, version=21005,
count=314, id=224, productName=VS2013 build 21005, version=21005,
count=83, id=225, productName=VS2013 build 21005, version=21005,
count=12, id=206, version=65501,
count=2, id=209, version=65501,
count=3, id=207, version=65501,
count=3, id=208, version=65501,
count=55, id=203, version=65501,
count=1109, id=1, productName=Unmarked objects,
count=87, productName=Unmarked objects (old),
count=2, id=223, productName=VS2013 UPD4 build 31101, version=31101,
count=1555, id=224, productName=VS2013 UPD4 build 31101, version=31101,
count=8605, id=225, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=2, id=151,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
Unsigned PE
Checks for missing Authenticode signature.
Aug 22, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Aug 22, 2013
count=54, id=207, version=41209,
count=1, id=206, version=41209,
count=3, id=207, version=65501,
count=12, id=205, version=65501,
count=211, id=1, productName=Unmarked objects,
count=9, id=203, version=65501,
count=16, id=206, version=65501,
count=1, id=202, version=65501,
count=132, id=211, version=65501,
count=1, id=201, version=65501,
count=1, id=204, version=65501,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=199, version=41118,
count=41, id=225, productName=VS2013 build 21005, version=21005,
count=71, id=223, productName=VS2013 build 21005, version=21005,
count=178, id=224, productName=VS2013 build 21005, version=21005,
count=5, id=203, version=65501,
count=95, id=1, productName=Unmarked objects,
count=15, productName=Unmarked objects (old),
count=141, id=224, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
Unsigned PE
Checks for missing Authenticode signature.
count=24, id=225, productName=VS2013 build 21005, version=21005,
count=15, id=223, productName=VS2013 build 21005, version=21005,
count=102, id=224, productName=VS2013 build 21005, version=21005,
count=2, id=203, version=65501,
count=3, id=221, productName=VS2013 UPD4 build 31101, version=31101,
count=120, id=1, productName=Unmarked objects,
count=1, id=225, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=199, version=41118,
count=66, id=225, productName=VS2013 build 21005, version=21005,
count=44, id=223, productName=VS2013 build 21005, version=21005,
count=199, id=224, productName=VS2013 build 21005, version=21005,
count=7, id=203, version=65501,
count=102, id=1, productName=Unmarked objects,
count=189, id=225, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=199, version=41118,
count=79, id=223, productName=VS2013 build 21005, version=21005,
count=282, id=224, productName=VS2013 build 21005, version=21005,
count=86, id=225, productName=VS2013 build 21005, version=21005,
count=2, id=206, version=65501,
count=713, id=224, productName=VS2013 UPD4 build 31101, version=31101,
count=17, id=203, version=65501,
count=380, id=1, productName=Unmarked objects,
count=886, id=225, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.