Oxymorphazone[.]exe[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Oxymorphazone.exe.zip
Size

265KB
MD5

776fb5f0883b39ec096489431e883ee9
SHA1

6af533012bb3a5c2e99f2038cb85233e24bf4f76
SHA256

d4368c4193773ba09469a9ff682d862e7c63dfd9670e700bc5a308b86193c0e0
SHA512

3794c5601b6c39b31604fc0103afcd71a09a0c1ddb79d368ebd5f5d5137851f5bba3f51b16278be9114b75137c682422aece414c084af92f816c879ee9ccd9fc
SSDEEP

6144:pPEBkYkLsrJBTlh1f1gwk+Aqan8bxat3EcSoZ1ASafeU+MGh/SRLPyGH:yBkDLs9plh1tgvd8wycSYAXJ+MEEbX

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Oxymorphazone (x64).exe
unpack001/Oxymorphazone (x86).exe
unpack001/Oxymorphazone-safety (x64).exe
unpack001/Oxymorphazone-safety (x86).exe

Files

Oxymorphazone.exe.zip
.zip
Oxymorphazone (x64).exe
.exe windows:5 windows x64 arch:x64

bcc485503b3c0465d7b7d556265d49db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\MSI\source\repos\Oxymorphazone\x64\Release\Oxymorphazone.pdb

Imports

kernel32

SetStdHandle
GetFileType
LCMapStringW
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetTickCount
FreeLibrary
ExitProcess
GetProcAddress
CreateThread
LoadLibraryW
CloseHandle
LoadLibraryA
TerminateThread
Sleep
CreateFileW
GetCurrentThreadId
VirtualAlloc
WriteFile
GetCurrentProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
WriteConsoleW

user32

UnhookWindowsHookEx
EnableWindow
GetCursorPos
ReleaseDC
SetCursorPos
GetWindowRect
GetDC
MessageBoxW
GetIconInfo
InvalidateRect
GetSystemMetrics
CallNextHookEx
LoadIconW
SetWindowsHookExW
GetDlgItem
DrawIconEx
GetDesktopWindow

gdi32

CreateCompatibleBitmap
CreateFontA
SelectObject
CreateDIBSection
CreateCompatibleDC
StretchBlt
PlgBlt
GetBitmapBits
DeleteDC
SetTextColor
TextOutA
SetBitmapBits
SetBkMode
GetObjectW
Polygon
DeleteObject
InvertRgn
CreateSolidBrush
CreateEllipticRgn
CreateBitmap
BitBlt

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW

winmm

waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutUnprepareHeader
waveOutWrite

msimg32

AlphaBlend
GradientFill

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Oxymorphazone (x86).exe
.exe windows:5 windows x86 arch:x86

3894baa1a54d6eac014400fb5be3afd9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\MSI\source\repos\Oxymorphazone\Release\Oxymorphazone.pdb

Imports

kernel32

GetFileType
SetStdHandle
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
GetTickCount
FreeLibrary
ExitProcess
GetProcAddress
CreateThread
LoadLibraryW
CloseHandle
LoadLibraryA
TerminateThread
Sleep
CreateFileW
GetCurrentThreadId
VirtualAlloc
WriteFile
GetCurrentProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
GetLastError
SetLastError
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
DecodePointer

user32

UnhookWindowsHookEx
EnableWindow
GetCursorPos
ReleaseDC
SetCursorPos
GetWindowRect
GetDC
MessageBoxW
GetIconInfo
InvalidateRect
GetSystemMetrics
CallNextHookEx
LoadIconW
SetWindowsHookExW
GetDlgItem
DrawIconEx
GetDesktopWindow

gdi32

CreateCompatibleBitmap
CreateFontA
SelectObject
CreateDIBSection
CreateCompatibleDC
StretchBlt
PlgBlt
GetBitmapBits
DeleteDC
SetTextColor
TextOutA
SetBitmapBits
SetBkMode
GetObjectW
Polygon
DeleteObject
InvertRgn
CreateSolidBrush
CreateEllipticRgn
CreateBitmap
BitBlt

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW

winmm

waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutUnprepareHeader
waveOutWrite

msimg32

AlphaBlend
GradientFill

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Oxymorphazone-safety (x64).exe
.exe windows:5 windows x64 arch:x64

0fc40614b5e0d8bb1690226869860cec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\MSI\source\repos\Oxymorphazone-safety\x64\Release\Oxymorphazone-safety.pdb

Imports

kernel32

SetStdHandle
GetFileType
LCMapStringW
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
GetTickCount
FreeLibrary
ExitProcess
CreateThread
LoadLibraryW
CloseHandle
TerminateThread
Sleep
GetCurrentThreadId
VirtualAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
CreateFileW

user32

UnhookWindowsHookEx
EnableWindow
GetCursorPos
ReleaseDC
SetCursorPos
GetWindowRect
GetDC
MessageBoxW
GetIconInfo
InvalidateRect
GetSystemMetrics
CallNextHookEx
LoadIconW
SetWindowsHookExW
GetDlgItem
DrawIconEx
GetDesktopWindow

gdi32

CreateCompatibleBitmap
CreateFontA
SelectObject
CreateDIBSection
CreateCompatibleDC
StretchBlt
PlgBlt
GetBitmapBits
DeleteDC
SetTextColor
TextOutA
SetBitmapBits
SetBkMode
GetObjectW
Polygon
DeleteObject
InvertRgn
CreateSolidBrush
CreateEllipticRgn
CreateBitmap
BitBlt

winmm

waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutUnprepareHeader
waveOutWrite

msimg32

AlphaBlend
GradientFill

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Oxymorphazone-safety (x86).exe
.exe windows:5 windows x86 arch:x86

167b2fbf2bc8e5db22df40bed7635644

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\MSI\source\repos\Oxymorphazone-safety\Release\Oxymorphazone-safety.pdb

Imports

kernel32

GetFileType
SetStdHandle
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
GetTickCount
FreeLibrary
ExitProcess
CreateThread
LoadLibraryW
CloseHandle
TerminateThread
Sleep
GetCurrentThreadId
VirtualAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
GetLastError
SetLastError
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
CreateFileW

user32

UnhookWindowsHookEx
EnableWindow
GetCursorPos
ReleaseDC
SetCursorPos
GetWindowRect
GetDC
MessageBoxW
GetIconInfo
InvalidateRect
GetSystemMetrics
CallNextHookEx
LoadIconW
SetWindowsHookExW
GetDlgItem
DrawIconEx
GetDesktopWindow

gdi32

CreateCompatibleBitmap
CreateFontA
SelectObject
CreateDIBSection
CreateCompatibleDC
StretchBlt
PlgBlt
GetBitmapBits
DeleteDC
SetTextColor
TextOutA
SetBitmapBits
SetBkMode
GetObjectW
Polygon
DeleteObject
InvertRgn
CreateSolidBrush
CreateEllipticRgn
CreateBitmap
BitBlt

winmm

waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutUnprepareHeader
waveOutWrite

msimg32

AlphaBlend
GradientFill

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
readme.txt

Sharing

General

Malware Config

Signatures

Files

bcc485503b3c0465d7b7d556265d49db

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

winmm

msimg32

Sections

.text Size: 79KB - Virtual size: 79KB

.rdata Size: 74KB - Virtual size: 73KB

.data Size: 2KB - Virtual size: 22KB

.pdata Size: 4KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 192B

_RDATA Size: 3KB - Virtual size: 3KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 2KB - Virtual size: 1KB

3894baa1a54d6eac014400fb5be3afd9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

winmm

msimg32

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 66KB - Virtual size: 65KB

.data Size: 2KB - Virtual size: 20KB

.gfids Size: 512B - Virtual size: 224B

_RDATA Size: 1KB - Virtual size: 1KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 5KB - Virtual size: 5KB

0fc40614b5e0d8bb1690226869860cec

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winmm

msimg32

Sections

.text Size: 79KB - Virtual size: 78KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 2KB - Virtual size: 22KB

.pdata Size: 4KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 192B

_RDATA Size: 3KB - Virtual size: 3KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 2KB - Virtual size: 1KB

167b2fbf2bc8e5db22df40bed7635644

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winmm

msimg32

Sections

.text Size: 72KB - Virtual size: 72KB

.rdata Size: 33KB - Virtual size: 33KB

.text
Size: 79KB - Virtual size: 79KB

.rdata
Size: 74KB - Virtual size: 73KB

.data
Size: 2KB - Virtual size: 22KB

.pdata
Size: 4KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 192B

_RDATA
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 66KB - Virtual size: 65KB

.data
Size: 2KB - Virtual size: 20KB

.gfids
Size: 512B - Virtual size: 224B

_RDATA
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 5KB - Virtual size: 5KB

.text
Size: 79KB - Virtual size: 78KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 2KB - Virtual size: 22KB

.pdata
Size: 4KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 192B

_RDATA
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 72KB - Virtual size: 72KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 2KB - Virtual size: 20KB

.gfids
Size: 512B - Virtual size: 224B

_RDATA
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 5KB - Virtual size: 5KB