Resubmissions

22/06/2026, 01:14

260622-blympag14t

22/06/2026, 01:09

260622-bhtvbsf19r5

General

  • Target
    OOAPB.exe
  • Size 2.2MB
  • Sample260622-blympag14t
  • SHA256 053ce0a4f1cddd3bc6eff802cd1e39a2c55a33798e7ed46df902729bb04941c1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Costura .NET executable packer 1 IoCs

    Costura packer aka Costura Fody, is an add-in for the .NET framework that embeds all external dependency .dll files as resources inside main executable.

File Explorer

  • OOAPB.exe
    .exe 2.2MB

OOAPB.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 053ce0a4f1cddd3bc6eff802cd1e39a2c55a33798e7ed46df902729bb04941c1
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Costura .NET executable packer

    Costura packer aka Costura Fody, is an add-in for the .NET framework that embeds all external dependency .dll files as resources inside main executable.

Digest
e1:69:86:14:4a:66:73:17:4d:92:f3:84:9f:b2:c0:91:a2:0b:9a:a2:68:f6:52:89:6b:ca:1e:99:f1:a4:10:25
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=O&O Software GmbH,O=O&O Software GmbH,L=Berlin,ST=Berlin,C=DE
Digest
38:87:3c:db:d2:c9:60:e1:97:92:cf:ef:19:59:46:da:f9:4e:a8:38
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=O&O Software GmbH,O=O&O Software GmbH,L=Berlin,ST=Berlin,C=DE
Minor OS version
0
Major OS version
4
Entry point
1966446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
OOAPB.pdb