Static task
static1
Behavioral task
behavioral1
Sample
afcd1bb6eb6ae30cb5313d80ad1f53b73dd55abed29269c980ed63ee21ad0f1c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afcd1bb6eb6ae30cb5313d80ad1f53b73dd55abed29269c980ed63ee21ad0f1c.exe
Resource
win10v2004-20220812-en
General
-
Target
afcd1bb6eb6ae30cb5313d80ad1f53b73dd55abed29269c980ed63ee21ad0f1c
-
Size
809KB
-
MD5
6c53d31146a9a031ced805b2435a1496
-
SHA1
31dc436ae0639ab6798e822188dcca24b241790c
-
SHA256
afcd1bb6eb6ae30cb5313d80ad1f53b73dd55abed29269c980ed63ee21ad0f1c
-
SHA512
d82d09cfbc8b6f176fb5181367205e2a7d4d09934bb6d46a69ea7edbe9455fc6eba2368ffff66f14219900c4eb0ddd53b69be66a663ae50f635ae1c2b8eb1acd
-
SSDEEP
24576:yW70tKdcLt5es9/a2MAd1iqB1eyvIvrzEsRKn:f0YdcZ8s9WAviCoyvSrXKn
Malware Config
Signatures
Files
-
afcd1bb6eb6ae30cb5313d80ad1f53b73dd55abed29269c980ed63ee21ad0f1c.exe windows x86
2b2e2711eb80ef2898bb238869952f14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
IsBadStringPtrA
GetLastError
GetLastError
MoveFileW
GetLastError
VirtualProtectEx
lstrcpyA
GetFullPathNameA
GetLastError
GetLastError
LoadLibraryW
GetModuleHandleA
GetLastError
CreateSemaphoreA
onex
OneXUpdatePortProfile
OneXUIResponse
OneXQueryStatistics
OneXQueryState
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE