Static task
static1
Behavioral task
behavioral1
Sample
paniniusb (1).exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
paniniusb (1).exe
Resource
win10v2004-20221111-en
General
-
Target
paniniusb (1).sys
-
Size
198KB
-
MD5
7e5bcbe7fb8f0daa586a87b92906ac1d
-
SHA1
e70e47c07d41750fe0862bf14297f6db3299a9e8
-
SHA256
474253b916dfdc70fc4eb3be8acb1689b93185483a746b259703342f524548f9
-
SHA512
7226771ab1c9b5f5694db7c89ba984a643f14f38d667bb9f017c449ce7c668cb10dc5dd003b782863ea89123d0985f0217ec8f20a5c5eeaceca5a5b88c62e457
-
SSDEEP
3072:xSFKwJnwLVNbatOgrb3PfAjiyBEU/D2Q/eGe08oekQ+AXwRG29GQyewZEGLZU:xSQmwLP4PYxO66fBjoetwQ2Em
Malware Config
Signatures
Files
-
paniniusb (1).sys.exe windows x86
c1091b8c0f3432e358c6cf5ab26537ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
InterlockedExchange
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
KeInitializeSpinLock
_snprintf
toupper
KeSetEvent
KeWaitForSingleObject
KeInitializeEvent
_vsnprintf
RtlExtendedLargeIntegerDivide
wcschr
RtlExtendedIntegerMultiply
memset
InterlockedIncrement
InterlockedDecrement
MmGetSystemRoutineAddress
RtlInitUnicodeString
RtlAssert
IoFreeIrp
ObfDereferenceObject
IoOpenDeviceRegistryKey
strncpy
KeQuerySystemTime
strncat
KeBugCheckEx
RtlUnwind
sprintf
_wcsicmp
DbgPrint
strncmp
memcpy
usbd.sys
_USBD_CreateConfigurationRequestEx@8
_USBD_ParseConfigurationDescriptorEx@28
hal
KfLowerIrql
KfAcquireSpinLock
KfReleaseSpinLock
KfRaiseIrql
Sections
.text Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 960B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ