Static task
static1
Behavioral task
behavioral1
Sample
ohoyecaysj4799.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ohoyecaysj4799.exe
Resource
win10v2004-20230220-en
General
-
Target
ohoyecaysj4799.exe
-
Size
636KB
-
MD5
0d8538ffcc2992e867d5da447af1bef6
-
SHA1
be43896187e71eef6f463f407aca1007495c4628
-
SHA256
f4e9e61847bf9d01a5249071cbe12827cdc1c5fdae59cbd2e11719c5dfde937c
-
SHA512
35ee84b60aba711d7e0cc39c5866c0072a1ed091ed8925568da252b85f1a049004b66cccf48d9704a9a4173352bbfece216897e9d4491aa499dec9bd360e509b
-
SSDEEP
12288:N2iNa9S9DnuFtiYs1PvvysZsBC85i7Du5sHqus0nIaA:N1I9iDuFtzAPvvM885KDu5sK0In
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ohoyecaysj4799.exe
Files
-
ohoyecaysj4799.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 633KB - Virtual size: 633KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ