ad3df13e6823bb8c2b5dd47bfb82dd5b79d193f7848b54a3eb299154468967cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad3df13e6823bb8c2b5dd47bfb82dd5b79d193f7848b54a3eb299154468967cb
Size

810KB
MD5

12dd93f9f05a3c69ba01f46f803fcbc7
SHA1

7ba667b53154cecf8de1616b465c86bc6be02ae0
SHA256

ad3df13e6823bb8c2b5dd47bfb82dd5b79d193f7848b54a3eb299154468967cb
SHA512

bc70ce75c8442bbd33c3fe8bceb44d713f0c96e66304fecdcdae5b87d0de5d5830de796e81d100d353605371660ba8ef74f37559a55c5c1fb824c0c55907b76b
SSDEEP

24576:+M0DFpuMtEo8WLyObzYxmW9RUmr3yg6sOHy4iF0brg:+4MtERWWfmW9/3yoOHy4iL

Score

N/A

Malware Config

Signatures

Files

ad3df13e6823bb8c2b5dd47bfb82dd5b79d193f7848b54a3eb299154468967cb
.exe windows x86

be3c77cf7b2729bca6510953668aee12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
GetLastError
GetLastError
GetLastError
VirtualProtectEx
MoveFileW
LoadLibraryW
GetLastError
CreateSemaphoreA
GetLastError
GetLogicalDriveStringsA
GetLastError
GetLastError
IsBadStringPtrA
GetCurrentDirectoryW
GetModuleHandleA
lstrcpyA

onex

OneXUIResponse
OneXQueryState
OneXQueryStatistics
OneXUpdatePortProfile

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE