onn[.]exe | Triage

Sharing

General

Target

onn.exe
Size

302.4MB
MD5

de378b2b0cf9bd4b62423e7942b786e3
SHA1

daa1d13c24c2595e28f3f8f6d79719b03ed6cb8a
SHA256

c5cf99fab5896f8f04257a76126ece1ef66c6faf632d2372644c429d933335c7
SHA512

6ed4569b84f94504033346e59c9a4e588e442491bcf5feb1aa752a5741bac139f1bc7e68aa11158bc32b06000b1861cc6a02415ae37ff39888183ca789315a0d
SSDEEP

49152:KjfK3MZJNphl2gdE2s+TGuE68e0g9uDK1Bsk:mK3MBphs92s6GhA0GP7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
onn.exe

Files

onn.exe
.exe windows x86

96edf2397e251a673e2c97056bcef6f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

SetRect

advapi32

SetSecurityDescriptorDacl

comctl32

ImageList_DragLeave

Sections

Size: - Virtual size: 804KB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE