Static task
static1
Behavioral task
behavioral1
Sample
1051f139da4a6ef7dc494c462886fcce241e79560b4a39b149ee612eb7fa8400.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1051f139da4a6ef7dc494c462886fcce241e79560b4a39b149ee612eb7fa8400.exe
Resource
win10v2004-20220812-en
General
-
Target
1051f139da4a6ef7dc494c462886fcce241e79560b4a39b149ee612eb7fa8400
-
Size
19KB
-
MD5
0aa08c063df6258a0a8cba843585a770
-
SHA1
90b9adc3558f8d0a4855afdfdb73f9e70bdd5136
-
SHA256
1051f139da4a6ef7dc494c462886fcce241e79560b4a39b149ee612eb7fa8400
-
SHA512
ba80d995cf6700f311a7eae158815b2af313b6ee707fe25cf05fb666d74dbb30736187ceb01b28bc7a2bb6f035335e72048561b850c20477882cf0fdddcfeedb
-
SSDEEP
384:v1wZ1o+zq/oC5DwohMovvl0vIk7dj6OGGRABzqsaNKfngB/VrZ:5fpjk7ZGGRABGsaNKPQ/lZ
Malware Config
Signatures
Files
-
1051f139da4a6ef7dc494c462886fcce241e79560b4a39b149ee612eb7fa8400.exe windows x86
648b2a862144abdb63b40439711fa2d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileW
GetLastError
GetLastError
GetConsoleTitleW
GetLastError
lstrcpyA
VirtualProtectEx
GetLastError
GetLogicalDriveStringsA
GetLastError
LoadLibraryW
GetModuleHandleA
GetFullPathNameA
CreateSemaphoreA
GetLastError
GetLastError
GetCurrentDirectoryW
onex
OneXUIResponse
OneXQueryStatistics
OneXQueryState
OneXUpdatePortProfile
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE