Behavioral task
behavioral1
Sample
OInstall.exe
Resource
win10v2004-20230703-en
General
-
Target
OInstall.exe
-
Size
10.9MB
-
MD5
d3affbbf3e184f04a751e46a8d517fb1
-
SHA1
d6336117b1491296aa8aab51177c548f85407dc9
-
SHA256
7142498b514c085123b3c183919f629cb92b1c33a1705d670c833e1418f31abf
-
SHA512
fd8b0c2d9eebd91c443d384daad3e32e47eb03b2555a3577ee29970c3e3d90c7f49625bd50b97c1d7cf31f22dbd24a80662d66224d908dd4fdd0297c16400cd1
-
SSDEEP
24576:DvKGQOaHu6NyrtUq5WPhVSif+spaZTAky4VAgzkB2mcjmGB0:fuH5MIPLSnZ9y4VAgzIZKDB0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource OInstall.exe
Files
-
OInstall.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 10.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10.8MB - Virtual size: 10.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE