Behavioral task
behavioral1
Sample
a77aafbb23e8e830c27a832b4cfb7c50d4b2a0bd94c466ed35c94e06f26f6c7d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a77aafbb23e8e830c27a832b4cfb7c50d4b2a0bd94c466ed35c94e06f26f6c7d.exe
Resource
win10v2004-20250129-en
General
-
Target
a77aafbb23e8e830c27a832b4cfb7c50d4b2a0bd94c466ed35c94e06f26f6c7d.exe
-
Size
897KB
-
MD5
ad6fe420229c7620517e19e643571c17
-
SHA1
eed9cb9ce763afcd5d96073a5d7b5748c1c4f28e
-
SHA256
a77aafbb23e8e830c27a832b4cfb7c50d4b2a0bd94c466ed35c94e06f26f6c7d
-
SHA512
c21fb37ab458f5560ea1eea02bedcc2a57e8441e6b4ef1b363113eff7e97328930603cf43a205fe45841201f6131f43b8f6ee013b86399ecde22c82a4b22c6a3
-
SSDEEP
24576:4+0Q+i45RyIz+gDymKYESup7qAPJNEOfK+pW1Q4R3fiRT2DHDO4jU5oa/0u7xsQ7:N
Malware Config
Signatures
-
Detects Obj3ctivity Stage1 1 IoCs
Obj3ctivity aka PXRECVOWEIWOEI is an infostealer written in C#.
resource yara_rule sample family_obj3ctivity -
Obj3ctivity family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a77aafbb23e8e830c27a832b4cfb7c50d4b2a0bd94c466ed35c94e06f26f6c7d.exe
Files
-
a77aafbb23e8e830c27a832b4cfb7c50d4b2a0bd94c466ed35c94e06f26f6c7d.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 894KB - Virtual size: 893KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ