Static task
static1
Behavioral task
behavioral1
Sample
30770e3927b47434b9cabd928b0f8c248b156ae260223a7d8a64a4feaa398dfe.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
30770e3927b47434b9cabd928b0f8c248b156ae260223a7d8a64a4feaa398dfe.exe
Resource
win10v2004-20220812-en
General
-
Target
30770e3927b47434b9cabd928b0f8c248b156ae260223a7d8a64a4feaa398dfe
-
Size
810KB
-
MD5
0e4f723c75e67cf1479e5c63b6c45a70
-
SHA1
cc3439d42bf04a55f7ad6d1bccb20b27acc72e96
-
SHA256
30770e3927b47434b9cabd928b0f8c248b156ae260223a7d8a64a4feaa398dfe
-
SHA512
f9da167dd6cd7a04ba17e787d0615fe417c43b0e54ca5b90e558702c88c6f86ab8608b9309ff0f7e602ed4bd350c78a9d1546a5d332c45df93defaf72c6a0183
-
SSDEEP
24576:1/A3DulW1WyboTlHS3PwdsudICX/nlGAuGknD:lA3DYW145kTavczn
Malware Config
Signatures
Files
-
30770e3927b47434b9cabd928b0f8c248b156ae260223a7d8a64a4feaa398dfe.exe windows x86
e0f3901636f60dcf33cff432ac8a973c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
GetLastError
GetConsoleTitleW
LoadLibraryW
GetLogicalDriveStringsA
GetLastError
GetLastError
GetCurrentDirectoryW
MoveFileW
GetLastError
GetFullPathNameA
CreateSemaphoreA
lstrcpyA
GetLastError
GetModuleHandleA
GetLastError
GetLastError
onex
OneXUIResponse
OneXQueryStatistics
OneXQueryState
OneXUpdatePortProfile
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 801KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE