Oem7F7[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Oem7F7.exe
Size

881KB
MD5

2b13b58ccbb7f3ce02c9bf957f7f529e
SHA1

ee82d4425ce1f6d5193822139a5f0abc8883cf38
SHA256

ef1edc756d5635b96d1700223a31c71bf3b1020222de4ee184161b44b16221ec
SHA512

b5e620e3ad4efe93359996e31240a90fb78968c0c27d14301427d6cdf93f22aa2c33e59f4b88e23803f2dd62d5801772bde0247675005b1649ef64edb6eff6be
SSDEEP

12288:abvnf8UaJEjEKUBKuJyECjDW76LS/Uc7xX0gmbKgPdr/uduQXqOFuzsj5uJZv355:WvoTKUsEyEyK+LS3g9KXqKtu73aBi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Oem7F7.exe

Files

Oem7F7.exe
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

OEM0
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

OEM1
Size: 804KB - Virtual size: 808KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE