Static task
static1
Behavioral task
behavioral1
Sample
ad199c733ea0c59dc1635541aeef90edc2e24aac17061196963f401e185922ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad199c733ea0c59dc1635541aeef90edc2e24aac17061196963f401e185922ac.exe
Resource
win10v2004-20220901-en
General
-
Target
ad199c733ea0c59dc1635541aeef90edc2e24aac17061196963f401e185922ac
-
Size
810KB
-
MD5
853e5faa80deeb307ede43a4caac4fcf
-
SHA1
0b74f7b51e38d2dab53ec1757b161a2e8cc91924
-
SHA256
ad199c733ea0c59dc1635541aeef90edc2e24aac17061196963f401e185922ac
-
SHA512
afe5e1977ee59be030b8886014befdb7e15a9f08b5c55607724728b871a28d027702aac931a22231d61f343fad93e9880d246e05f3ab8ffaa5250d22ed32e62a
-
SSDEEP
24576:xM0DFpuMtEo8WLyObzYxmW9RUmr3yg6sOHy4iF0brg:x4MtERWWfmW9/3yoOHy4iL
Malware Config
Signatures
Files
-
ad199c733ea0c59dc1635541aeef90edc2e24aac17061196963f401e185922ac.exe windows x86
17cbb0e3c26bb1bf1aeb1ff33249f113
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetCurrentDirectoryW
MoveFileW
GetLastError
GetLastError
LoadLibraryW
GetLogicalDriveStringsA
GetLastError
GetConsoleTitleW
GetModuleHandleA
GetLastError
GetLastError
CreateSemaphoreA
GetLastError
GetFullPathNameA
VirtualProtectEx
lstrcpyA
onex
OneXQueryStatistics
OneXQueryState
OneXUpdatePortProfile
OneXUIResponse
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 801KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE