Static task
static1
Behavioral task
behavioral1
Sample
onibye.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
onibye.exe
Resource
win10v2004-20240910-en
General
-
Target
onibye.exe
-
Size
274KB
-
MD5
8062645066b12ef6b55aa13423f6c0b1
-
SHA1
efc5734796ffa25792121681ac6672cec71d3a5f
-
SHA256
903cc624ac1c700d72a0872da0c1eb5eb24a20281e1bfa0fb15b7d4722525471
-
SHA512
b3031cf37d721aa86a9fa7f32a4408811e4e90f6a833ebf8b375cf789f17fc722411695679b297ae581e2b854aac56676fda4194bb4d1473cc93eba0de9524d1
-
SSDEEP
6144:LPybpNhjPaAu0Nikoc+Vqn9TU2MtnFqFKNSbo/pi9tviH+:bybpNhjPaAu4oc+VqxeNFqSz/pi9tvie
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource onibye.exe
Files
-
onibye.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ