Static task
static1
Behavioral task
behavioral1
Sample
2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9.exe
Resource
win10v2004-20220812-en
General
-
Target
2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9
-
Size
809KB
-
MD5
a99405104904cd2d04b7aa85856a5bcf
-
SHA1
2ed9da3ccc24f95adb35e6cad9d72bb13d09e3b3
-
SHA256
2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9
-
SHA512
cdeed8162c44c7edeb00a7a706fd66686ee9b4deb4db84b6f75478ca1d2703eeadf4ed774a26d9b558c7a3a4c2566fc5e89f66134f470ab7e98fab71331fffdf
-
SSDEEP
24576:HW70tKdcLt5es9/a2MAd1iqB1eyvIvrzEsRKn:y0YdcZ8s9WAviCoyvSrXKn
Malware Config
Signatures
Files
-
2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9.exe windows x86
a3612c55de1ac9afe290a73000ddce65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
GetLastError
GetLogicalDriveStringsA
GetLastError
GetModuleHandleA
GetFullPathNameA
GetLastError
GetCurrentDirectoryW
MoveFileW
LoadLibraryW
GetLastError
GetLastError
GetLastError
GetLastError
VirtualProtectEx
CreateSemaphoreA
IsBadStringPtrA
onex
OneXUpdatePortProfile
OneXQueryState
OneXQueryStatistics
OneXUIResponse
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE