Static task
static1
Behavioral task
behavioral1
Sample
37170ebcbad7d5272d6815d8e736b942bfa5d71a38a57a378d4a4f1bfec7ea62.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
37170ebcbad7d5272d6815d8e736b942bfa5d71a38a57a378d4a4f1bfec7ea62.exe
Resource
win10v2004-20220901-en
General
-
Target
37170ebcbad7d5272d6815d8e736b942bfa5d71a38a57a378d4a4f1bfec7ea62
-
Size
809KB
-
MD5
0d4497ea477dca27fd3ff8d36e006486
-
SHA1
9af7066664cb51f53e184decffcc5693ff8bb8d2
-
SHA256
37170ebcbad7d5272d6815d8e736b942bfa5d71a38a57a378d4a4f1bfec7ea62
-
SHA512
6c8a605200cee31832558008a1c87072ccf6c22ee68fbf25f2284d291c9fe20aec6b3921cbd0bf85221545e97d78882869840e03715e989e6bc912e515500686
-
SSDEEP
12288:28YMvY67smhKc0ACn4DeU+bTAgztI9y4bpE0bEZjnxvtJIPQSYH4iWQLnjoHcTJN:LvY6fKc0ACn4y/8ktbspEpFxVJBk5e
Malware Config
Signatures
Files
-
37170ebcbad7d5272d6815d8e736b942bfa5d71a38a57a378d4a4f1bfec7ea62.exe windows x86
8a06154656ec5a7cca92b7eea75a8dfb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetLastError
GetLastError
GetLastError
VirtualProtectEx
lstrcpyA
GetLogicalDriveStringsA
GetFullPathNameA
GetLastError
IsBadStringPtrA
CreateSemaphoreA
GetModuleHandleA
LoadLibraryW
GetLastError
GetLastError
MoveFileW
GetCurrentDirectoryW
onex
OneXUIResponse
OneXQueryStatistics
OneXUpdatePortProfile
OneXAddTLV
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE