Static task
static1
Behavioral task
behavioral1
Sample
f3f9985401809fddf9b9a58f818066fac3c9b2536e1175523758f56c6f8c1070.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3f9985401809fddf9b9a58f818066fac3c9b2536e1175523758f56c6f8c1070.exe
Resource
win10v2004-20221111-en
General
-
Target
f3f9985401809fddf9b9a58f818066fac3c9b2536e1175523758f56c6f8c1070
-
Size
809KB
-
MD5
edb89f3ada9013df846907bc2100c13f
-
SHA1
594b368e26a6cbf7402aea6f12e29d85d6382b03
-
SHA256
f3f9985401809fddf9b9a58f818066fac3c9b2536e1175523758f56c6f8c1070
-
SHA512
f2a4dee32b9b7f78cff8aa626278be5999e7a95300e4e635721a5f3769c785895c3a1c14d23978f09a6d21c1ea070c9b5c73eee59ba85197f7d45a14452f9f69
-
SSDEEP
12288:CrhoUabOoAhWncAcwhztOV0bZBN7PTnmCqVMVFduNVwuLQ98mhQ+XCbWKWY:GnduhztOViBN7PTmxVMVvufs9tmk0WK
Malware Config
Signatures
Files
-
f3f9985401809fddf9b9a58f818066fac3c9b2536e1175523758f56c6f8c1070.exe windows x86
e9ba0d762bdd7bdab76e81bf37654181
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
GetFullPathNameA
MoveFileW
IsBadStringPtrA
GetLastError
VirtualProtectEx
GetLastError
GetLogicalDriveStringsA
GetLastError
GetLastError
CreateSemaphoreA
GetLastError
LoadLibraryW
GetModuleHandleA
GetLastError
GetCurrentDirectoryW
GetLastError
onex
OneXQueryStatistics
OneXUpdatePortProfile
OneXQueryState
OneXUIResponse
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE