Static task
static1
General
-
Target
owo_priv.exe
-
Size
306KB
-
MD5
44d5de75cc81ea01e3017eaf15551b5c
-
SHA1
bf1069db9a81e964987d7b8a80b6e475771cb93c
-
SHA256
9aecaed64c9536158583afe2e265ec18c48f321b61d9ebaac1557f0dc1dc0dd6
-
SHA512
9ea59b32ce5b2163ec6927fd443d85a950abd8fb652e3a2b9aee5c2a20258614bc6570efb4ea6910f588046f73e49d27d9d81ead0ee81e486532a866c749d2e7
-
SSDEEP
6144:82purYxts6a4DwXUCGZQPYduWSrEiGPTqx/z6fAVi39D4eROBXjxX9kL2:krYxC6aqwX2QA+4qtitD47N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource owo_priv.exe
Files
-
owo_priv.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 300KB - Virtual size: 299KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ