scheme_external_get_thread_local_variables
Static task
static1
Behavioral task
behavioral1
Sample
GeForce_Experience_v3.26.0.154.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
GeForce_Experience_v3.26.0.154.exe
Resource
win10v2004-20221111-en
General
-
Target
GeForce_Experience_v3.26.0.154.rar
-
Size
1.5MB
-
MD5
2f776c8b2113e2e8d04e35b9e762da7f
-
SHA1
98a6b296791bf93a6409d6ffca4c0ba74f9cb22b
-
SHA256
07dc440c9f4631800010bbb91098c36e22b4d79671057cb59c168a3811128f30
-
SHA512
eec066812351470e530ff8fd931eb7d717030f2eda10dfeedf8504da946b166a5fa1f74b85d87f918615fe8045aca26a7a7f66015b642dc5f66ebf94bc7f0ad5
-
SSDEEP
49152:yc0/Qq1+Q1ELjOkzA0DoMFQ7SQvIXJWuZ:5Ry187zl47SFJhZ
Malware Config
Signatures
Files
-
GeForce_Experience_v3.26.0.154.rar.rar
-
FAQ/FAQ.txt
-
GeForce_Experience_v3.26.0.154.exe.exe windows x86
6f58b23058fd8e0039b8f1a1b7e06ed5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateJobObjectA
GetComputerNameW
GetCurrentProcessId
GlobalMemoryStatusEx
CreateProcessW
GetFileType
InterlockedIncrement
TerminateJobObject
DeleteTimerQueueTimer
BackupRead
BackupSeek
GetEnvironmentStringsW
FreeEnvironmentStringsA
SetConsoleTitleW
MoveFileW
GenerateConsoleCtrlEvent
GetExitCodeProcess
QueryPerformanceFrequency
QueryPerformanceCounter
GlobalSize
GlobalAlloc
LocalHandle
lstrlenA
LocalAlloc
InterlockedDecrement
GetConsoleMode
GetNumberOfConsoleInputEvents
ConnectNamedPipe
DisconnectNamedPipe
GetOverlappedResult
FlushFileBuffers
GlobalFree
Process32Next
GetVersionExA
LoadLibraryA
CreateFileA
AttachConsole
GetFileInformationByHandle
Sleep
CreateToolhelp32Snapshot
SetFileAttributesW
SetCurrentDirectoryA
ResumeThread
PeekNamedPipe
GetConsoleTitleW
SetErrorMode
GetProcessId
DecodePointer
HeapSize
WaitForMultipleObjects
GetProcessHeap
GetCommandLineA
AssignProcessToJobObject
WriteFile
GetCurrentProcess
GetFullPathNameW
GetCommandLineW
CreateNamedPipeA
VirtualProtect
CreateTimerQueueTimer
SetHandleInformation
Process32First
GetModuleFileNameA
ReadFile
VirtualQuery
MulDiv
GlobalUnlock
IsBadReadPtr
FormatMessageA
LocalFree
GlobalLock
GetSystemInfo
GetFileAttributesW
CreateFileW
DeviceIoControl
GetLocaleInfoA
FreeLibrary
GetProcAddress
GetLastError
IsValidCodePage
GetACP
GetCPInfo
IsDBCSLeadByteEx
CreateProcessA
GetStartupInfoA
WaitForSingleObject
CreatePipe
TerminateProcess
GetShortPathNameW
GetLongPathNameW
GetTempFileNameW
DeleteFileW
FindClose
GetTempPathW
FindNextFileW
FindFirstFileW
GetTickCount
DebugBreakProcess
CloseHandle
OpenProcess
FindFirstFileExW
WriteConsoleW
GetTimeZoneInformation
SetEndOfFile
FreeEnvironmentStringsW
GetOEMCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStringTypeW
HeapReAlloc
HeapAlloc
HeapFree
GetStdHandle
GetModuleFileNameW
GetConsoleCP
DuplicateHandle
ReadConsoleW
SetConsoleCtrlHandler
GetFileAttributesExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RemoveDirectoryW
CreateDirectoryW
SetEnvironmentVariableW
SetEnvironmentVariableA
VirtualAlloc
SetStdHandle
SetFilePointerEx
GetModuleHandleExW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
LoadLibraryExW
MultiByteToWideChar
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
RtlUnwind
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleA
WideCharToMultiByte
advapi32
GetUserNameW
RegQueryValueA
RegCloseKey
OpenProcessToken
GetNamedSecurityInfoW
SetNamedSecurityInfoW
LookupPrivilegeValueA
GetAce
GetAclInformation
AdjustTokenPrivileges
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
shell32
ShellExecuteW
CommandLineToArgvW
DragQueryFileW
DragQueryPoint
DragAcceptFiles
DragFinish
Shell_NotifyIconA
DragQueryFileA
gdi32
MoveToEx
CreateSolidBrush
ExtTextOutW
GetNearestColor
SelectObject
StartPage
EndDoc
GetDCOrgEx
GetDeviceCaps
DeleteDC
TextOutW
GetTextExtentPoint32W
SetTextColor
SetBkMode
CreateFontIndirectA
GetObjectW
DeleteObject
CreateDCA
GetTextMetricsA
CreateFontIndirectW
SetTextAlign
SetAbortProc
StartDocW
EndPage
CreateBitmap
CreateCompatibleDC
CreateFontA
ExtTextOutA
BitBlt
GetCurrentObject
GetBkMode
CreatePen
LineTo
GetTextExtentPointA
GetPixel
GdiFlush
GetTextExtentPointW
SetBkColor
SetPixel
EnumFontFamiliesW
comdlg32
GetSaveFileNameW
ReplaceTextW
FindTextW
ChooseFontW
CommDlgExtendedError
PrintDlgW
GetOpenFileNameW
ole32
CoInitialize
CoCreateInstance
StringFromCLSID
OleUninitialize
CoRegisterClassObject
OleInitialize
CoRevokeClassObject
CoUninitialize
CoTaskMemFree
netapi32
NetUserEnum
NetApiBufferFree
user32
DestroyMenu
GetMessageTime
SetMenu
MoveWindow
GetSysColor
GetMonitorInfoA
GetDlgItemTextW
LoadBitmapA
GetKeyboardLayout
FrameRect
GetWindowLongA
MapWindowPoints
RegisterClassW
CallWindowProcA
FindWindowExA
ClientToScreen
SetWindowLongA
DestroyIcon
RedrawWindow
SetTimer
GetCapture
RegisterWindowMessageA
OffsetRect
DialogBoxIndirectParamA
GetClassInfoW
ShowWindow
TrackPopupMenu
DestroyCursor
GetWindowPlacement
GetScrollPos
WindowFromPoint
CreatePopupMenu
MessageBeep
IsRectEmpty
GetSystemMetrics
EndDialog
GetCursor
SendMessageW
ScreenToClient
CreateWindowExW
FillRect
GetMenuItemCount
SetActiveWindow
MonitorFromWindow
InvertRect
InsertMenuA
SetWindowPos
IsWindowVisible
GetDC
InsertMenuItemW
LoadCursorA
GetWindowRect
GetWindow
MonitorFromPoint
PostMessageW
ShowScrollBar
GetKeyState
GetMenuState
DefWindowProcW
GetMessageW
SetScrollInfo
MessageBoxA
GetCaretBlinkTime
CreateMenu
PtInRect
UpdateWindow
IntersectRect
ScrollWindowEx
mouse_event
SetParent
DrawMenuBar
SetCapture
InsertMenuW
ToUnicode
SetCursor
PostMessageA
SetClassLongA
TrackPopupMenuEx
CreateDialogIndirectParamA
RemoveMenu
GetClientRect
IsZoomed
GetDlgItem
DrawIconEx
GetMenuItemRect
KillTimer
SetWindowTextW
SystemParametersInfoW
SetForegroundWindow
LoadIconA
MapVirtualKeyA
IsWindow
DestroyWindow
EnableWindow
ReleaseDC
GetParent
ReleaseCapture
ShowCursor
InvalidateRect
IsIconic
SetCursorPos
GetCursorPos
BeginPaint
EndPaint
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
IsClipboardFormatAvailable
RegisterClipboardFormatA
GetFocus
MessageBoxW
CharLowerBuffA
GetSystemMenu
LoadImageA
SendMessageTimeoutA
EnumChildWindows
GetClassNameA
MsgWaitForMultipleObjects
wsprintfA
GetDlgItemTextA
DispatchMessageW
IsDialogMessageW
PeekMessageW
GetWindowTextA
CharUpperBuffA
SetDlgItemTextW
SetWindowTextA
RegisterClassA
EnumWindows
DefWindowProcA
CreateWindowExA
SetFocus
TranslateMessage
SendDlgItemMessageA
SendMessageA
GetWindowDC
CreateDialogParamA
SystemParametersInfoA
GetDesktopWindow
EnableMenuItem
comctl32
CreateToolbarEx
ord17
oleaut32
SysAllocString
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
RegisterActiveObject
SetErrorInfo
UnRegisterTypeLi
RevokeActiveObject
winmm
PlaySoundW
mciSendStringA
mciGetDeviceIDA
mciSendStringW
wsock32
socket
connect
recv
__WSAFDIsSet
closesocket
select
WSAStartup
send
WSACleanup
WSAGetLastError
inet_ntoa
htons
ws2_32
freeaddrinfo
getaddrinfo
Exports
Exports
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 162KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 197KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ