Static task
static1
Behavioral task
behavioral1
Sample
NEW ODER.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
NEW ODER.exe
Resource
win10v2004-20240221-en
General
-
Target
21022024_2159_21022024_NEW ODER.zip
-
Size
14KB
-
MD5
f275544f5c21098b9cdeed961b1e277d
-
SHA1
7a059705301591c3155ceec906a11e82c74388e7
-
SHA256
f78fe6350792ae34edae82bd195aa4a66f403bfcb1faf82ff44f21a1598edd8d
-
SHA512
96c872d662e5ee4558fbc550f4a199d6d1e7dcd5b1e2bd4b7cc763cf5263c0c54bbe44d7a6237f74846d319262043122433c4fb60ee46f8470dad05bd3999bd8
-
SSDEEP
384:hmhEH6ziIvjTKLtactU6/1VavMwUksQydUFIuya:S1iWTMt1/70MwrydUGux
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NEW ODER.exe
Files
-
21022024_2159_21022024_NEW ODER.zip.zip
Password: infected
-
NEW ODER.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ