Static task
static1
Behavioral task
behavioral1
Sample
9d05b6536825c35b0d6ca7457765fb5229cb56a7ed18051ccc8925624ad7f5b8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9d05b6536825c35b0d6ca7457765fb5229cb56a7ed18051ccc8925624ad7f5b8.exe
Resource
win10v2004-20220812-en
General
-
Target
9d05b6536825c35b0d6ca7457765fb5229cb56a7ed18051ccc8925624ad7f5b8
-
Size
147KB
-
MD5
24692101c1d0b33ca12f76eed3030083
-
SHA1
bbedb3d23ccaa5f2f063110ed73c0b125a4157b6
-
SHA256
9d05b6536825c35b0d6ca7457765fb5229cb56a7ed18051ccc8925624ad7f5b8
-
SHA512
71adb69f0d51f662da4ba4fc794eb956d3ad58d547ac685d7e8de772e2e45a0b36ca2886b63d30dd3e17c8c25377101ed4ec92b549696665790994a3c42c6f12
-
SSDEEP
3072:0nXLFcmIt+7rTsrOGenIBaJIhdoVcvmt8F4gT70/Lxss26:07um/+bBaSjouGGiLr26
Malware Config
Signatures
Files
-
9d05b6536825c35b0d6ca7457765fb5229cb56a7ed18051ccc8925624ad7f5b8.exe windows x86
fc2e8e879b946d173c3a7f8a1abce6c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetPropA
BroadcastSystemMessage
GetSysColor
CallNextHookEx
CalcMenuBar
IsWindowUnicode
IsWindowVisible
LockWindowUpdate
EndTask
CascadeWindows
OpenClipboard
OemToCharW
GetTabbedTextExtentA
GetTabbedTextExtentW
OffsetRect
OpenInputDesktop
MonitorFromRect
TranslateMessage
MoveWindow
HideCaret
SetRectEmpty
IntersectRect
GetCaretPos
GetWindowWord
FlashWindow
ReleaseDC
GetAncestor
InsertMenuW
GetWindowRgn
IsWindowVisible
ShowCursor
GetWindowDC
GetWindowInfo
GetUpdateRect
GetUpdateRgn
onex
OneXAddEapAttributes
opengl32
glColor3b
glColor3bv
glColor3d
glColor3dv
glColor3f
glColor3fv
glColor3i
glColor3iv
glColor3s
kernel32
GetLastError
CreateFileA
GetWindowsDirectoryA
GetTickCount
ExitProcess
EnterCriticalSection
InitializeCriticalSection
VirtualFree
IsBadCodePtr
LocalFree
LocalAlloc
GetTickCount
_lread
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
IsValidCodePage
IsBadWritePtr
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
SearchPathA
ExitProcess
ExitThread
CreateThread
GetTempPathW
OpenThread
SetConsoleFont
SetCalendarInfoW
Process32Next
LeaveCriticalSection
SetConsolePalette
SetConsoleScreenBufferSize
msi
MsiCreateRecord
MsiCreateRecord
MsiCreateRecord
MsiCreateRecord
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ