Static task
static1
Behavioral task
behavioral1
Sample
onibye (1).exe
Resource
win11-20240802-en
General
-
Target
onibye (1).exe
-
Size
175KB
-
MD5
9f21a5cfcf9fe779eb31a36406c3314d
-
SHA1
ba6b3de50833c48d3241bd226f22608d791cc3bd
-
SHA256
c76cdd2ee7cb679855b634b4cbda77f11955b0908993f202c3a171e88f142693
-
SHA512
8efb37b82a454be1fd3145a0abb81b57cb355b845e5c8ed6ebb41790ca85d54dd1d7a372772406bbebb016ef9993e23294024b89144b51ad498818831b823698
-
SSDEEP
3072:tR8yeAUfw9IAOF+k5oFNG/d9hr0rBc4Za+KZ6dZ1Dtc/+Y:tR8yeAUoOFjD9hr0rBcYz1Dti+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource onibye (1).exe
Files
-
onibye (1).exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ