OxyAuthExample[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
OxyAuthExample.exe
Size 115KB
Sample260703-eael8afz4q
SHA256 800ad4462ef828f16c217a6a5e89c8ca0c50210733b8ebcb9d2fd9f76ffaae24
MD5 6b687653c55904f1b294cde5e6976c95
SHA1 fb8dbf0bec6643d19f8ad3a56c62838dcf65a6a0
SHA512 276a0e95673534b7e5468afe234cda4e375a315cd5c67d211e8d845a195ce011a10f6b17bf5ff09a70e25c8b2f2796082f557896f017e4dff57db53cdb0fd65f
SSDEEP 3072:ELQKjg6TPLcvpLPe/fU/v8SnYxKmycTEUJQA3E:ELQKcocvpLW/fU/vBclO
TLSH
T16BB31AA9395610B6D6B18D74CE026803FB2178854BB5ABDF5BD09DD60E73B90AF3B700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OxyAuthExample.exe

File Explorer

OxyAuthExample.exe

.exe 115KB

OxyAuthExample.exe

IMPHASH 71dccdeae4700544faee86b052120a6e
SHA256 800ad4462ef828f16c217a6a5e89c8ca0c50210733b8ebcb9d2fd9f76ffaae24
MD5 6b687653c55904f1b294cde5e6976c95
SHA1 fb8dbf0bec6643d19f8ad3a56c62838dcf65a6a0
SHA512 276a0e95673534b7e5468afe234cda4e375a315cd5c67d211e8d845a195ce011a10f6b17bf5ff09a70e25c8b2f2796082f557896f017e4dff57db53cdb0fd65f
SSDEEP 3072:ELQKjg6TPLcvpLPe/fU/v8SnYxKmycTEUJQA3E:ELQKcocvpLW/fU/vBclO
TLSH
T16BB31AA9395610B6D6B18D74CE026803FB2178854BB5ABDF5BD09DD60E73B90AF3B700
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

79296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\jeremi\Desktop\OxyAuthC++\x64\Release\OxyAuthExample.pdb

msvcp140

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??Bios_base@std@@QEBA_NXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Xbad_alloc@std@@YAXXZ ?good@ios_base@std@@QEBA_NXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?uncaught_exception@std@@YA_NXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

winhttp

WinHttpCloseHandle WinHttpSetOption WinHttpOpenRequest WinHttpReadData WinHttpOpen WinHttpReceiveResponse WinHttpQueryDataAvailable WinHttpSendRequest WinHttpConnect

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context __current_exception __C_specific_handler memset _CxxThrowException memcmp memchr __std_terminate __std_exception_copy __std_exception_destroy memcpy memmove

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e _get_initial_narrow_environment _configure_narrow_argv exit _set_app_type _seh_filter_exe _crt_atexit _exit __p___argc _register_onexit_function _errno __p___argv _cexit _c_exit _initialize_onexit_table _register_thread_local_exe_atexit_callback _invoke_watson terminate system _initialize_narrow_environment

api-ms-win-crt-convert-l1-1-0

strtol atoi strtoll

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh malloc free

api-ms-win-crt-utility-l1-1-0

srand rand

api-ms-win-crt-stdio-l1-1-0

__p__commode _pclose _popen fgets _set_fmode

api-ms-win-crt-string-l1-1-0

isalnum

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

InitializeSListHead SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW GetSystemTimeAsFileTime AcquireSRWLockExclusive ReleaseSRWLockExclusive GetTickCount ExitProcess CreateThread IsDebuggerPresent GetModuleHandleW GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess WakeAllConditionVariable SetThreadPriority Sleep GetCurrentProcess

advapi32

CryptCreateHash CryptHashData CryptDestroyHash CryptGetHashParam CryptReleaseContext CryptAcquireContextA