Static task
static1
Behavioral task
behavioral1
Sample
Oauth-joiner.exe
Resource
win7-20240903-en
General
-
Target
Oauth-joiner.exe
-
Size
77.2MB
-
MD5
8358266f9b618c5a692fdb99c64a6072
-
SHA1
8ad266ba79edf010c1b9d683ecc870240edb1662
-
SHA256
22932a82cbf834c5e1bf5689665ff5912e4b343d7fec9a2430d1d46b0ae20a80
-
SHA512
28dd7193abe1ab89ed7751169352fef5716c835b874e04f68ad0fcf326f75b47e3dbbd0a0240de76437a788843a1d65eb91d5c03f12f40cc505a4018c7eb3689
-
SSDEEP
1572864:WcPlC4hahF/gk98Vb7NL5z1ZLWNmfpee7ycbGrswIG6UiYxDVbWbs4a6m:WqLq5ynMe7fKr7rxjWV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Oauth-joiner.exe
Files
-
Oauth-joiner.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 77.2MB - Virtual size: 77.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ