Static task
static1
Behavioral task
behavioral1
Sample
MyNDISPlan.scr
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
MyNDISPlan.scr
Resource
win10v2004-20220414-en
General
-
Target
MyNDISPlan.scr
-
Size
40KB
-
MD5
c025124d271f7e1ca674ba43c7e069ad
-
SHA1
c02c4ed76dcf923e8ffff93ef6c68695d2e9a986
-
SHA256
78073cd80cd2ce04aa2f089760a60ffc494bd241eaa9787b17573eb152692ba5
-
SHA512
e72a5133237b84ae31e81385883965f8570c7b04e9fee2af0f02ee188b63f3bca9cc44a8ffdd869b72f598145c5f9b9f5ad105d567b7340d9804c017a7176a85
-
SSDEEP
768:IbOZ0GtDvNF4xuavLJT0FNPhcBbbVVpThAEW3EDbh18EqkUPdBEOHShkn+B2Bcmj:AOZ0GpvUNvdgL+BbbVVpThAEW3EDbh1c
Malware Config
Signatures
Files
-
MyNDISPlan.scr.exe windows x86
8a5d79fedf4cb55268ab5bf2609a5860
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
CreateWindowExA
SendMessageA
EndDialog
DialogBoxParamA
PostMessageA
DefWindowProcA
EndPaint
DestroyWindow
PostQuitMessage
DrawTextA
GetClientRect
BeginPaint
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
UpdateWindow
kernel32
GetStartupInfoA
lstrlenA
GetModuleHandleA
gdi32
SetTextAlign
GetStockObject
DeleteObject
CreateSolidBrush
TextOutA
SetBkColor
GetBkColor
comctl32
InitCommonControlsEx
msvcrt
_iob
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
fputs
strlen
fprintf
memcmp
memmove
fputc
fflush
fgetc
fclose
malloc
free
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ