Static task
static1
Behavioral task
behavioral1
Sample
OFFERR_S.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
OFFERR_S.exe
Resource
win10v2004-20230220-en
General
-
Target
Offerr STA 56009214.img
-
Size
1.2MB
-
MD5
b8c029c2473f9a006ad6aa11678e1ccd
-
SHA1
2dc72162529ba121275393e5c60acf00977612bc
-
SHA256
0328d26998cb989cc3c3940f16758869401bf037af14d28b0b3faa9b7e4b4d84
-
SHA512
c98f1cdac5c6f50a8f695247574bd057791b1a1f6e464f9efa0f72caddbbe981f1fa3cec2054882de9328e72bb47a4b433f44c9ef4fc59dc38d2c0aaf92a9901
-
SSDEEP
12288:n6k+cpuflY/dwUc+RigJYPZfajEceE5Bj:n6k1UlYiUJi4oZfaocN5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/OFFERR_S.EXE
Files
-
Offerr STA 56009214.img.iso
-
OFFERR_S.EXE.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 533KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ