OLEDScreenSaver[.]exe | Triage

Resubmissions

27/09/2024, 08:41

240927-kltheaxare 3

27/09/2024, 08:39

240927-kkcs9stfnk 3

Sharing

Copy URL Twitter E-mail

General

Target

OLEDScreenSaver.exe
Size

589KB
MD5

8aa806c99827bcde4ca33f98a4175907
SHA1

653e91f6fe7f7dff0562e7143a1bf897fce15165
SHA256

402154c1fcc83806bc5308920f22faf2b3a32c2e2a3f5e7bb9ee1913a2bd51ee
SHA512

c615372ed1876058173e09f687c9ee4ff4d23f2f24fe54bdd7bd281d8e5b71d0f54170b452d12bf3a3e9aee6465ad06d333450d37d0be62a28b315c2d5ddd2c7
SSDEEP

6144:bRV3zWXU3nOjRV3zWXU3nOtRV3XWBU/nV:b7KJ7Kj7A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OLEDScreenSaver.exe

Files

OLEDScreenSaver.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Hypnox\source\repos\OLEDScreenSaverGitHub\OLEDScreenSaver\OLEDScreenSaver\obj\Release\OLEDScreenSaver.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ