OnixVersionSwitcher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

OnixVersionSwitcher.exe
Size

758KB
MD5

c209f7b05a4296a4605ee7c39de344ac
SHA1

f8c1eee544ae2ec035befa30b20b13cc0cce2990
SHA256

26a5a1ec27ce8ddc00d4881eea5551acd9efd30994f6788e0010576dd3fbc8ca
SHA512

4be423ebea065e02f5a441d0b1d91de8c06f0c5dbcd9ce0e93114e3f7f4039a0e971d4b792025fd4b98de78f3e36c50b17d92066aa7b5050f8f5e18511a1de43
SSDEEP

12288:vvg2nxeO52AyYu35/s2rKZd2rGdy0q4+JX+wWfTUI8fLQZA4DNYe:H5sWjyYO9KWs+JuPX8fDCN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OnixVersionSwitcher.exe

Files

OnixVersionSwitcher.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 644KB - Virtual size: 643KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ