Static task
static1
Behavioral task
behavioral1
Sample
mdrv.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
mdrv.exe
Resource
win10v2004-20220812-en
General
-
Target
mdrv.exe
-
Size
32KB
-
MD5
df1bce9d9eb4e0ee7597b6aaf2f1aa1d
-
SHA1
cf8314dba5efc9732a87a6d0e28952f25a88283f
-
SHA256
f06df548c74a1f71d384ac9df7dd7b90f00ee58c25965735b3c28d0994e10202
-
SHA512
76b11fe9cc54653db37697f8ca46bd76c1d64b07307aca05592070a5f3fc753b4cd25ba4087dcf3fdf9cce1497ba02bb90f3f6357497892267d414f5e2afb856
-
SSDEEP
96:eLf62JPlVBr437RjR+LqPtboyn3LL6vRjomMpKFL:SfpPr437RjR+LqP1oynPZKFL
Malware Config
Signatures
Files
-
mdrv.exe.exe windows x86
e833f6a773fd87f339332842b8b8d978
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
SetUnhandledExceptionFilter
GetStartupInfoA
GetModuleHandleA
TerminateThread
driver
drv_run
drv_free
drv_init
msvcrt
_initterm
__p__commode
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_except_handler3
__setusermatherr
_adjust_fdiv
__dllonexit
__p__fmode
__set_app_type
_controlfp
_onexit
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 293B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ