Oxigen[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Oxigen.exe
Size

9.5MB
MD5

3392b0f227f7c55e3c2b15227a5b6563
SHA1

51bf4d5b2438f54a0cc5b0e12e30c5e01e4bae61
SHA256

0606a35041f896cc2dcd8d3d2494ffeed58ba528a2fb3d79f10e2bc7306b73c4
SHA512

143457eca997072f8e47f91320a300223e1aab1b9d1d04b9f33f12dd095f48e46b746a80aa540e34d86e96dba1cf7c20a1c4f9ba3b2d2a95ec498a204c030932
SSDEEP

196608:4e+hvGthuHpP4bnA1tA1+qBwUHBqX5HzABV1NWlX83UVe:r6vUkt47AbAZ1Bq9AB4F8EM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Oxigen.exe

Files

Oxigen.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.5MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ