Static task
static1
Behavioral task
behavioral1
Sample
3b0cc50b5fe866b2d9008f11696a55131a8a8402f51278fedafad17845b67ad9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3b0cc50b5fe866b2d9008f11696a55131a8a8402f51278fedafad17845b67ad9.exe
Resource
win10v2004-20220812-en
General
-
Target
3b0cc50b5fe866b2d9008f11696a55131a8a8402f51278fedafad17845b67ad9
-
Size
809KB
-
MD5
0662af8cf3dd1a9a1bf84e6092e9b1c6
-
SHA1
4241fb5501984f699e5ceb0e5e2116faac46090c
-
SHA256
3b0cc50b5fe866b2d9008f11696a55131a8a8402f51278fedafad17845b67ad9
-
SHA512
b0c1638b06fe26e7098d56d6a306844a3d0b92071fd8a444d2db874d709d7f7c3e729176dc6ef3bf6e0dbbacac9394721a32a9562409870bc0b5b938641fe93b
-
SSDEEP
12288:AHChwH78MUJtYGz3Cq2pJYGCS+QvQVkjI3CdVlAf8Z5wByyVvGSYH4LMG:kCZR3CqMiS+EEkjgQkf8Z5wBdVvGtYY
Malware Config
Signatures
Files
-
3b0cc50b5fe866b2d9008f11696a55131a8a8402f51278fedafad17845b67ad9.exe windows x86
acf3ba9a002ce604cf89aa9b01d6f7f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
LoadLibraryW
GetLogicalDriveStringsA
GetLastError
GetLastError
CreateSemaphoreA
GetLastError
IsBadStringPtrA
GetLastError
GetLastError
GetLastError
GetModuleHandleA
MoveFileW
GetCurrentDirectoryW
GetLastError
VirtualProtectEx
GetFullPathNameA
onex
OneXUpdatePortProfile
OneXQueryStatistics
OneXAddTLV
OneXUIResponse
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE