Static task
static1
Behavioral task
behavioral1
Sample
c571d3f036d7732c79558163051ce5ef6e3e9a9f62263d38fa6d0678fb8820b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c571d3f036d7732c79558163051ce5ef6e3e9a9f62263d38fa6d0678fb8820b8.exe
Resource
win10v2004-20221111-en
General
-
Target
c571d3f036d7732c79558163051ce5ef6e3e9a9f62263d38fa6d0678fb8820b8
-
Size
41KB
-
MD5
0e9573761b4aac7c2a76ede6819dc468
-
SHA1
0ed677f66670b9b5f8a79a65012aa63eaf6d31d6
-
SHA256
c571d3f036d7732c79558163051ce5ef6e3e9a9f62263d38fa6d0678fb8820b8
-
SHA512
cb35ee5696a9bab0114be4dad53b46945c3c6e4f631675bb81eb40fc9ad0c1b4383aed6703c287fab2997ebecf28984162145a5881cfc7972df5ba2836660369
-
SSDEEP
768:yZGIWhwJqry59u4RPq6FgRk5Y3Tm0Hc1bGsJZq6ysKbV:y0UqGPu4ZqbUyT/4iUvys4
Malware Config
Signatures
Files
-
c571d3f036d7732c79558163051ce5ef6e3e9a9f62263d38fa6d0678fb8820b8.exe windows x86
2df80650cc1853520a241690a4ebf486
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ndis.sys
NdisWaitEvent
ntoskrnl.exe
DbgBreakPointWithStatus
MmGetSystemRoutineAddress
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE