GPUDrive[.]zip

Resubmissions

03/12/2022, 04:28

221203-e3zsvshc91 1

03/12/2022, 04:25

221203-e18yradh68 1

Sharing

Copy URL Twitter E-mail

General

Target

GPUDrive.zip
Size

65KB
MD5

c1eb7a8bcd8dd7d101419f1b7ce97750
SHA1

86fdf310a0395ede81257c0847a5de89d47d9b20
SHA256

aae346ea058c5ffdffc194fe96fe7cd7cfd8f150503abb24f78e9a9d32fc837c
SHA512

0337730d23bef94f099eb890b3ceade313bbc410e97fa427adc495f9057b087917957fa76083ba24cb9850c05d68c2d46ab22137c88ab7c8732c35d96b7dcdb9
SSDEEP

1536:O1RnqXwom/fr4VRMr3NQJZfbjCbBfSx3h+GqmpegIPz:OvqAoMMVRMT2bI5SxxhdpaPz

Score

N/A

Malware Config

Signatures

Files

GPUDrive.zip
.zip

Password: mysubsarethebest
GPUDrive.exe
.exe windows x64

Password: mysubsarethebest

1ef7d89e6a974c6522c9fdc96033add2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WaitForSingleObject
UnmapViewOfFile
CloseHandle
CreateFileMappingW
GetLastError
MapViewOfFile
VirtualQuery
CreateMutexW
CreateEventW
SetEvent
GetModuleHandleW
CreateProcessW
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep
GetConsoleWindow
IsProcessorFeaturePresent
GetCommandLineW

user32

MessageBoxA
MessageBoxW
DispatchMessageW
TranslateMessage
DefWindowProcW
RegisterClassExW
LoadCursorW
LoadIconW
EnableWindow
IsIconic
IsWindowVisible
GetWindowTextW
MoveWindow
PostQuitMessage
GetWindowLongPtrW
SetWindowTextW
GetMessageW
SendMessageW
SetForegroundWindow
UpdateWindow
InvalidateRect
ShowWindow
CreateWindowExW
SetWindowLongPtrW
SetProcessDPIAware

gdi32

CreateFontA

shell32

Shell_NotifyIconW
CommandLineToArgvW

msvcp140

??Bid@locale@std@@QEAA_KXZ
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?_Incref@facet@locale@std@@UEAAXXZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
_Cnd_init
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_join
_Thrd_id
?_Xbad_function_call@std@@YAXXZ
_Cnd_wait
?_Throw_C_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_start
_Mtx_unlock
_Mtx_destroy
_Cnd_destroy
_Cnd_signal
_Mtx_lock
_Mtx_init

imdisk.cpl

ImDiskRemoveDevice
ImDiskCreateDevice
ImDiskSetAPIFlags

opencl

clGetPlatformIDs
clGetPlatformInfo
clGetDeviceIDs
clGetDeviceInfo
clReleaseMemObject
clReleaseContext
clCreateContext
clCreateCommandQueue
clCreateBuffer
clEnqueueWriteBuffer
clEnqueueReadBuffer
clReleaseCommandQueue

comctl32

InitCommonControlsEx

vcruntime140

memset
_CxxThrowException
__C_specific_handler
_purecall
wcsstr
__std_exception_copy
memmove
memcpy
__std_terminate
__CxxFrameHandler3
__std_exception_destroy

api-ms-win-crt-string-l1-1-0

wcscat_s
wcscpy_s
wcsncpy_s
_wcsicmp

api-ms-win-crt-convert-l1-1-0

_wtoi64
_itow_s

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
_set_fmode
__stdio_common_vfwprintf
__stdio_common_vfprintf
__stdio_common_vsnwprintf_s

api-ms-win-crt-runtime-l1-1-0

_exit
_get_wide_winmain_command_line
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_wide_environment
_configure_wide_argv
terminate
exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_invalid_parameter_noinfo_noreturn
_initterm_e
_set_app_type
_seh_filter_exe
_initterm

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
_set_new_mode
free

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: mysubsarethebest

Password: mysubsarethebest

1ef7d89e6a974c6522c9fdc96033add2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

msvcp140

imdisk.cpl

opencl

comctl32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 1KB - Virtual size: 1KB

.pdata Size: 2KB - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 56B

.rsrc Size: 53KB - Virtual size: 52KB

.reloc Size: 512B - Virtual size: 176B

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 1KB - Virtual size: 1KB

.pdata
Size: 2KB - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 56B

.rsrc
Size: 53KB - Virtual size: 52KB

.reloc
Size: 512B - Virtual size: 176B