Static task
static1
Behavioral task
behavioral1
Sample
OneControl_Client.exe
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
OneControl_Client.exe
Resource
win10v2004-20230220-en
General
-
Target
OneControl_Client.exe
-
Size
120KB
-
MD5
277c37f6c867946d5f2e3433264e5e7e
-
SHA1
4097f6e04d3a43933e492c104b1e2ca83adcc75f
-
SHA256
be3dffe1a4a7383d9ab1c6c41c40e23402bf4db9627736628161e0bc76e87109
-
SHA512
eea3de51e52cd1bce5f8695eb1e943c788f7ef2cff17157d8faef1f96bbc3b2640fb7021fbdc9e8f665dcc0895e6a721fc7e4aa15caa8198bfc0d2595a6f1843
-
SSDEEP
3072:ajWnO88x57ZuL3PzFZ9fzeIBjP26VHFxw:anFxpcL3PJZVzpBjuy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource OneControl_Client.exe
Files
-
OneControl_Client.exe.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 89KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE