immoofk by eu4oria[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
immoofk by eu4oria.exe
Size 696KB
Sample260730-swbdksbf67
SHA256 02dfae45aef3c34dd2a1c0ad1e5bb2af2b9971d1312c50ebdc2c3a1708678ce4
MD5 f83fc9e1c2b0cf86d31bd8a0e2a8f545
SHA1 bb06c99e708b8d1fe55b3e79dccad4fa8e5c3fb6
SHA512 69392956196d4dc8cb3a8edca6f5422b079e0197c5d920c9a0e3a77b96d2f52055c2f95f18195d38d41dfa6c027c2f76c0f7296e2a3d17576565d7d7a7857f66
SSDEEP 12288:Bv2654CufOl1gaxUqXsBZ6ND4BbR8WgYkECWki92Ku/dy4CVH+yFczYEj:d2654C4O04UwsBwhvVdmVH+ywD
TLSH
T194E4234BEB6B0458C075C6BAC4978DBBF63BB858475527CB17042E2A1EB93C4C238F85
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
immoofk by eu4oria.exe

File Explorer

immoofk by eu4oria.exe

.exe 696KB

immoofk by eu4oria.exe

IMPHASH e81d90b230abc81b286482b9dba12e35
SHA256 02dfae45aef3c34dd2a1c0ad1e5bb2af2b9971d1312c50ebdc2c3a1708678ce4
MD5 f83fc9e1c2b0cf86d31bd8a0e2a8f545
SHA1 bb06c99e708b8d1fe55b3e79dccad4fa8e5c3fb6
SHA512 69392956196d4dc8cb3a8edca6f5422b079e0197c5d920c9a0e3a77b96d2f52055c2f95f18195d38d41dfa6c027c2f76c0f7296e2a3d17576565d7d7a7857f66
SSDEEP 12288:Bv2654CufOl1gaxUqXsBZ6ND4BbR8WgYkECWki92Ku/dy4CVH+yFczYEj:d2654C4O04UwsBwhvVdmVH+ywD
TLSH
T194E4234BEB6B0458C075C6BAC4978DBBF63BB858475527CB17042E2A1EB93C4C238F85
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

Minor OS version

Major OS version

Entry point

618496

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

560KB

Virtual Size

560KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

240B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.CRT

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rcd7cb

Size

92KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

immoofk by eu4oria.exe

ntdll

kernel32

generic