oxygen_u[.]zip | Triage

Sharing

General

Target

oxygen_u.zip
Size

1.9MB
MD5

e7389c06a166d23535488922a647a201
SHA1

4af16736fc46743044a3fd0994551405dd04431a
SHA256

d82eae905d4eb03b8db1374c8d2ee2b281c5e7c1dbb1940c5a7e589c14b7cfad
SHA512

0089b1274b0b0de031a9195cd95a0da1e7bdcb5ac8d786cc6c5750931f50cd79c3668ab06d67544b68514401c861e635e1623cb016416dee4c2a38105ecb2cdd
SSDEEP

49152:WuLfIiclD5JJ872qmXcqtldqiAfgSaBOD:WuLf7sJJ872rXcqtlQiOsoD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/OxygenU.exe

Files

oxygen_u.zip
.zip
OxygenU.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ