Static task
static1
Behavioral task
behavioral1
Sample
d9c1ebb7758acaa14a333968cdac91c7b608eeaf51b2d18c317375857f685e7b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d9c1ebb7758acaa14a333968cdac91c7b608eeaf51b2d18c317375857f685e7b.exe
Resource
win10v2004-20220812-en
General
-
Target
d9c1ebb7758acaa14a333968cdac91c7b608eeaf51b2d18c317375857f685e7b
-
Size
809KB
-
MD5
90233460381a9fd24746df4d9d849dc0
-
SHA1
b9123ed8d81a94a74407ca90a720ddc6c75e066e
-
SHA256
d9c1ebb7758acaa14a333968cdac91c7b608eeaf51b2d18c317375857f685e7b
-
SHA512
3cec84f0f34e7daaf1a473ee5924d070e3d7241621bb70fd7c579fc0c948e4aaf0be63d8087eccd8a6803055c3f6b794dd3c706395a991a0716ed74f3fab28cb
-
SSDEEP
24576:RVdN4BCQT0KJdwBNA07Ood5WK97QQOtI9ieQl0m+5VD:Ts30KJdw3iod5L1aI9LSy5
Malware Config
Signatures
Files
-
d9c1ebb7758acaa14a333968cdac91c7b608eeaf51b2d18c317375857f685e7b.exe windows x86
2319d7964e52b2aa7dcc3e120bf21e9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetLogicalDriveStringsA
GetLastError
LoadLibraryW
GetFullPathNameA
GetLastError
GetLastError
GetLastError
IsBadStringPtrA
GetLastError
GetCurrentDirectoryW
MoveFileW
CreateSemaphoreA
lstrcpyA
GetModuleHandleA
VirtualProtectEx
GetLastError
onex
OneXAddTLV
OneXUIResponse
OneXUpdatePortProfile
OneXQueryStatistics
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE