Static task
static1
Behavioral task
behavioral1
Sample
ORIEJOE.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ORIEJOE.exe
Resource
win10v2004-20220812-en
General
-
Target
ORIEJOE.exe
-
Size
2.2MB
-
MD5
8f6225ff80040f3f9888eac74022d6c2
-
SHA1
6ea9f632e0f815bd5751d387ce8641251908682b
-
SHA256
e06c3351c0ae004540812cbbf40f04684b011e4bde0524e46085addfd6f712c8
-
SHA512
cef4aae9d5899cf7ab7e3eba4b87b04b99e9d9336a2e2991e31767c0c3c0b0ebf1034ce591f53b78a58864cced99c68ab308a37ff9f1bbc524a68c720666f62f
-
SSDEEP
24576:ER2pBLsfqSKtTRpMYr0Ga9ePIWvfIFht1d9ILKiseOtkiD:EAplsCSKRRpM6kegWwn9INliD
Malware Config
Signatures
Files
-
ORIEJOE.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ