Static task
static1
Behavioral task
behavioral1
Sample
dfdd87138a73e089f7ce5ab2f58fb7c8d9255f48c706116dc869edd942ecde04.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dfdd87138a73e089f7ce5ab2f58fb7c8d9255f48c706116dc869edd942ecde04.exe
Resource
win10v2004-20220812-en
General
-
Target
dfdd87138a73e089f7ce5ab2f58fb7c8d9255f48c706116dc869edd942ecde04
-
Size
809KB
-
MD5
5c9f07721ea4b59c866a3e7d872f2460
-
SHA1
a65b2cdc3f9d65498fe7d519a440dc3127ef9217
-
SHA256
dfdd87138a73e089f7ce5ab2f58fb7c8d9255f48c706116dc869edd942ecde04
-
SHA512
1ffa91a56e9a3714073cc89f59e5b33b407f6b1f5a47d39bdc2bc9197b8f3fa6727cca67e15116b69863f7f775c2e16382e69bf836791f436096986a38b04e36
-
SSDEEP
24576:Hw9Z1Od1uOJzHM7vEVJr3rskEKaLxSNZII1Vvfh5vU:w6umI7Ar3rXa9oFHvZ5
Malware Config
Signatures
Files
-
dfdd87138a73e089f7ce5ab2f58fb7c8d9255f48c706116dc869edd942ecde04.exe windows x86
aba99862bfd4dce4c51f1ca232439087
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadStringPtrA
GetLastError
GetLastError
VirtualProtectEx
GetLastError
GetLastError
GetLastError
GetFullPathNameA
CreateSemaphoreA
GetLastError
GetCurrentDirectoryW
GetModuleHandleA
LoadLibraryW
GetLogicalDriveStringsA
lstrcpyA
MoveFileW
GetLastError
onex
OneXQueryState
OneXUIResponse
OneXQueryStatistics
OneXUpdatePortProfile
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE