Static task
static1
Behavioral task
behavioral1
Sample
cfdf96ff8f4c5136f6837e82bd3ef41074e17c9e0b314fa8e80fb7ebd2106fc0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfdf96ff8f4c5136f6837e82bd3ef41074e17c9e0b314fa8e80fb7ebd2106fc0.exe
Resource
win10v2004-20220901-en
General
-
Target
cfdf96ff8f4c5136f6837e82bd3ef41074e17c9e0b314fa8e80fb7ebd2106fc0
-
Size
810KB
-
MD5
688520b1bce78499d338b9318b05aaca
-
SHA1
69f078890a31f0ff12968bd9444c590224a8f85c
-
SHA256
cfdf96ff8f4c5136f6837e82bd3ef41074e17c9e0b314fa8e80fb7ebd2106fc0
-
SHA512
bc56693f9558d9da4eab44afa6055c7408dc9c94b5b3e710958ef05627545eef7b2ee879150b0e6c673454ca640f0bdc4f460ed1f48ddd0e17e87dc977ac98ab
-
SSDEEP
24576:69RYDpJ+pK73DNvJGs9e+MO0TBoeSBydOXJMpqbYmEqd9D:eRYWg73eAZMOYBDiydOXBErS5
Malware Config
Signatures
Files
-
cfdf96ff8f4c5136f6837e82bd3ef41074e17c9e0b314fa8e80fb7ebd2106fc0.exe windows x86
fe0576e29574cfb30b9e31b4c0ea57e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
GetCurrentDirectoryW
GetLogicalDriveStringsA
MoveFileW
CreateSemaphoreA
GetLastError
GetConsoleTitleW
GetFullPathNameA
VirtualProtectEx
GetLastError
GetLastError
GetLastError
GetModuleHandleA
GetLastError
LoadLibraryW
GetLastError
GetLastError
onex
OneXUIResponse
OneXUpdatePortProfile
OneXQueryState
OneXQueryStatistics
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 801KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE