Static task
static1
Behavioral task
behavioral1
Sample
d68487ed464b379cae032ca0d62b6d4e8584bc8df0d85f48fe9c9b22bef56c29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d68487ed464b379cae032ca0d62b6d4e8584bc8df0d85f48fe9c9b22bef56c29.exe
Resource
win10v2004-20220812-en
General
-
Target
d68487ed464b379cae032ca0d62b6d4e8584bc8df0d85f48fe9c9b22bef56c29
-
Size
809KB
-
MD5
0cdd12efdc16767bd8f1f2ff26753f20
-
SHA1
3acd6ccee3cccd28337964b649d68a69e517ac31
-
SHA256
d68487ed464b379cae032ca0d62b6d4e8584bc8df0d85f48fe9c9b22bef56c29
-
SHA512
e55bd1ac1f761ca2bf3e2454989812c03eed5fb9a60f9407b5f119876a8544df75638a932d2cfe401d2ae89fa08498d4373171a9ab7d875fa429687a4c61060b
-
SSDEEP
12288:COotUWlIoqeJ0JvB8BI7JMc9Hu3msGIaUDh/mWxCKRcLxYl/T9Iop+MDmUDJw4JR:CNUa+SG7f9Ho/moNcLxGvDmUFwU
Malware Config
Signatures
Files
-
d68487ed464b379cae032ca0d62b6d4e8584bc8df0d85f48fe9c9b22bef56c29.exe windows x86
ad1b910243a29f93b5e85870a797cc87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreA
GetLastError
LoadLibraryW
IsBadStringPtrA
GetFullPathNameA
GetModuleHandleA
GetLastError
lstrcpyA
MoveFileW
VirtualProtectEx
GetCurrentDirectoryW
GetLogicalDriveStringsA
GetLastError
GetLastError
GetLastError
GetLastError
GetLastError
onex
OneXUIResponse
OneXUpdatePortProfile
OneXQueryState
OneXQueryStatistics
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE