Static task
static1
Behavioral task
behavioral1
Sample
b22354a6268df4bcbd8f70caac7ecaff20a23a44a59bc1aba18950b25c627259.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b22354a6268df4bcbd8f70caac7ecaff20a23a44a59bc1aba18950b25c627259.exe
Resource
win10v2004-20220812-en
General
-
Target
b22354a6268df4bcbd8f70caac7ecaff20a23a44a59bc1aba18950b25c627259
-
Size
21KB
-
MD5
061110fbc981c52bbe039c04b46d819b
-
SHA1
dedfcff26909c4c8ffe148a13abe25f02cf4c5cb
-
SHA256
b22354a6268df4bcbd8f70caac7ecaff20a23a44a59bc1aba18950b25c627259
-
SHA512
f2036057c555eaa570f92a7248cb459ec5fd2ff444271e4eefc8ef0aff0d115cb6da34b62b88ddf758a23babb5e466514cd4769784568c0ae70071004fb9792d
-
SSDEEP
384:PDjZmFhYTR5elMsH+ITm12DZ3Rw6c6CCl4sIKtZVi:+mTR5eAMM2dBw61CCl9PtZQ
Malware Config
Signatures
Files
-
b22354a6268df4bcbd8f70caac7ecaff20a23a44a59bc1aba18950b25c627259.exe windows x86
b7402d4b43a639be2e346484763bf911
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
strstr
DbgPrint
RtlAssert
ndis.sys
NdisTerminateWrapper
NdisQueryPendingIOCount
NdisPacketPoolUsage
NdisReEnumerateProtocolBindings
NdisIMNotifyPnPEvent
NdisSetEvent
NdisReleaseSpinLock
NdisAcquireSpinLock
NdisMSetAttributesEx
NdisIMGetDeviceContext
NdisFreePacket
NdisIMCopySendCompletePerPacketInfo
NdisIMCopySendPerPacketInfo
NdisAllocatePacket
NdisSend
NdisIMGetCurrentPacketStack
NdisFreeMemory
NdisQueryBufferSafe
NdisAllocateMemory
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset
NdisRequest
NdisReturnPackets
NdisGetPoolFromPacket
NdisTransferData
NdisWaitEvent
NdisCloseAdapter
NdisResetEvent
NdisCancelSendPackets
NdisFreePacketPool
NdisIMAssociateMiniport
NdisIMDeregisterLayeredMiniport
NdisRegisterProtocol
NdisInitUnicodeString
NdisMRegisterUnloadHandler
NdisIMRegisterLayeredMiniport
NdisInitializeWrapper
NdisAllocateSpinLock
NdisMRegisterDevice
NdisMSleep
NdisMDeregisterDevice
NdisDeregisterProtocol
NdisCloseConfiguration
NdisIMInitializeDeviceInstanceEx
NdisOpenAdapter
NdisAllocatePacketPoolEx
NdisInitializeEvent
NdisAllocateMemoryWithTag
NdisReadConfiguration
NdisOpenProtocolConfiguration
NdisIMDeInitializeDeviceInstance
NdisIMCancelInitializeDeviceInstance
NdisDprFreePacket
NdisDprAllocatePacket
NdisGetReceivedPacket
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 357B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ