nvcpl[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

nvcpl.dll
Size

4.6MB
MD5

2c33d95b73ab9c9a9fca0451e57284d8
SHA1

f6cb26c9f629424327fb44158f9d69a07027fd2f
SHA256

c59090db22807c9b1bfe18d29b4cb6890887104337859e6cfdbf0fe8f2b8ab5d
SHA512

da69385cb4abb6f42b26584f1353348d1a45a52a4aafe8cc3f8daf7631a920a6cbc43f1e527744be0df3a79881c310d55fcbd606ffb123ccdd8e93761d3ef731
SSDEEP

49152:A8mKzTAFANfUoym2sR2gJrTWZ2sDnl4uHNeUaSkO0mAN241uENzsENdB:nzT7//NWZ2SbtQn/nRX

Score

N/A

Malware Config

Signatures

Files

nvcpl.dll
.dll regsvr32 windows x86

d60e21805cce5ae7831bf24641aa85de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
InterlockedExchange
CompareStringW
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
GetStartupInfoA
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
GetTimeZoneInformation
GetACP
HeapSize
GetFileType
SetStdHandle
RaiseException
TerminateProcess
ExitProcess
GetLocalTime
HeapReAlloc
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
lstrcmpA
FindResourceExA
GetCurrentProcessId
SetEvent
GetProcessHeap
HeapAlloc
HeapFree
OpenProcess
SetEnvironmentVariableA
GetThreadLocale
lstrcatA
GetCurrentThread
LocalAlloc
GetCurrentProcess
FlushInstructionCache
IsDBCSLeadByte
lstrcpynA
LoadLibraryExA
SizeofResource
lstrcmpiA
GetShortPathNameA
LoadResource
MultiByteToWideChar
lstrlenW
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersionExA
GetCurrentThreadId
GetWindowsDirectoryA
EnumResourceTypesA
EnterCriticalSection
LeaveCriticalSection
CreateThread
OpenEventA
WaitForSingleObject
CreateEventA
WaitForMultipleObjects
OpenMutexA
WideCharToMultiByte
GetTickCount
FindResourceA
GetUserDefaultLCID
GetLocaleInfoA
GetNumberFormatA
GetSystemDirectoryA
CreateProcessA
GetExitCodeProcess
lstrlenA
CompareStringA
CreateFileA
DeviceIoControl
FormatMessageA
OutputDebugStringW
LocalFree
CreateMutexA
ReleaseMutex
CloseHandle
GetUserDefaultLangID
GlobalMemoryStatus
MulDiv
lstrcpyA
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryA
FreeLibrary
Sleep
GetModuleFileNameA
GetModuleFileNameW
LoadLibraryW
OutputDebugStringA
GetModuleHandleW
GetLastError
GetModuleHandleA
GetProcAddress
SetLastError
PulseEvent
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DuplicateHandle
FindFirstFileA
FindClose
GetFileTime
GetFileSize
GlobalDeleteAtom
VirtualProtect
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
GetFileAttributesA

user32

GetWindowLongA
GetClassNameA
GetSysColor
SetFocus
WinHelpA
SetWindowLongA
GetDlgItem
wvsprintfA
IntersectRect
SetClassLongA
SetRectEmpty
GetActiveWindow
SetWindowRgn
OpenClipboard
GetClipboardData
CloseClipboard
IsRectEmpty
GetFocus
DrawEdge
RegisterWindowMessageA
LockWindowUpdate
DrawIconEx
InsertMenuItemA
CreatePopupMenu
FindWindowExA
LoadMenuA
LoadIconA
LoadImageA
FindWindowA
IsWindowVisible
GetDCEx
PtInRect
GetMenuItemInfoA
SetMenuItemInfoA
ModifyMenuA
GetCursorPos
DeleteMenu
GetMenuItemCount
CheckMenuItem
EnableMenuItem
IsWindowEnabled
GetWindowTextLengthA
GetWindowDC
GetWindow
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SendMessageTimeoutA
CallWindowProcA
MapDialogRect
EnumWindows
EnumChildWindows
BroadcastSystemMessageA
GetThreadDesktop
OpenDesktopA
ExitWindowsEx
GetWindowTextA
CharNextA
IsDialogMessageA
GetDialogBaseUnits
LoadStringA
DestroyWindow
CreateDialogParamA
SystemParametersInfoA
OpenInputDesktop
PostQuitMessage
GetLastActivePopup
SetWindowsHookExA
PeekMessageA
ValidateRect
CallNextHookEx
GetKeyState
DispatchMessageA
TranslateMessage
GetMessageA
SetMenuItemBitmaps
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
SetActiveWindow
GetCapture
GetWindowPlacement
IsIconic
GetWindowRect
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
GetMenuItemID
GetMenu
GetClassInfoA
GetTopWindow
SetScrollPos
GetScrollPos
AdjustWindowRectEx
CreateDialogIndirectParamA
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
GetSysColorBrush
SetThreadDesktop
CloseDesktop
IsWindow
InsertMenuA
RegisterClipboardFormatA
GetAsyncKeyState
ShowCursor
GetDesktopWindow
CharLowerA
ChildWindowFromPointEx
GetSubMenu
TrackPopupMenuEx
DestroyMenu
GetDlgItemTextA
GetSystemMetrics
BeginPaint
EndPaint
LoadCursorA
EndDialog
CheckRadioButton
UpdateWindow
ClientToScreen
GetDlgItemInt
SetDlgItemInt
ScreenToClient
DestroyIcon
InvalidateRect
CopyRect
InflateRect
DialogBoxIndirectParamA
SetWindowTextA
CheckDlgButton
MessageBoxA
wsprintfA
GetDlgCtrlID
IsDlgButtonChecked
MoveWindow
RedrawWindow
ShowWindow
SetDlgItemTextA
GetClientRect
GetDC
ReleaseDC
FillRect
CreateWindowExA
RegisterClassExA
EnableWindow
MessageBeep
SetTimer
UnregisterClassA
RegisterClassA
SetCapture
SetCursor
ClipCursor
ReleaseCapture
DestroyCursor
DefWindowProcA
GetParent
PostMessageA
SendDlgItemMessageA
MapWindowPoints
SendMessageA
SetWindowPos
SetForegroundWindow
KillTimer
GetNextDlgTabItem

gdi32

CreateBrushIndirect
PatBlt
UpdateColors
CreateFontIndirectA
GetTextMetricsA
GetTextExtentPointA
CreateDCA
StretchBlt
MoveToEx
LineTo
ExtEscape
CreatePen
SetROP2
Polyline
SetStretchBltMode
CreatePalette
CreateDIBitmap
CreateCompatibleDC
SelectPalette
RealizePalette
SelectObject
BitBlt
DeleteDC
CreateSolidBrush
DeleteObject
SetTextColor
SetBkMode
GetStockObject
GetObjectA
GetTextExtentPoint32A
Rectangle
CreateCompatibleBitmap
CreateFontA
TextOutA
ExtTextOutA
SetBkColor
GetCurrentObject
CombineRgn
CreateRectRgn
GdiFlush
GetDeviceCaps
SetMapMode
CreateBitmap
GetClipBox
Escape
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
RestoreDC
SaveDC

advapi32

AdjustTokenPrivileges
OpenEventLogA
GetOldestEventLogRecord
ReadEventLogA
CloseEventLog
LookupAccountSidA
RegQueryValueExA
GetTokenInformation
EqualSid
LookupPrivilegeValueA
ImpersonateSelf
OpenThreadToken
OpenProcessToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
RevertToSelf
FreeSid
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA

shell32

ShellExecuteExA
ShellExecuteA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ole32

CoTaskMemRealloc
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc

oleaut32

RegisterTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocString
SysStringLen
SysAllocStringLen
SysFreeString
SafeArrayCreate
SafeArrayPutElement
VariantClear

comctl32

PropertySheetA
CreatePropertySheetPageA
ord17
ImageList_Destroy
DestroyPropertySheetPage

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ExportNvCplAdapterString
ExportNvWsApps
ExportOEMDefaults
GetdtcfgLastError
GetdtcfgLastErrorEx
NvColorGetGammaRamp
NvColorSetGammaRamp
NvCplDaemon
NvCplDeviceManagerState
NvCplForceSecondaryCrtDetect
NvCplForceTVConnection
NvCplGetAdapterStringEx
NvCplGetConnectedDevicesString
NvCplGetDataInt
NvCplGetDebugLevel
NvCplGetDigitalVibranceLevel
NvCplGetExtendedMode
NvCplGetFlatPanelNativeRes
NvCplGetPCDisplayMask
NvCplGetPowerMizerMenuItem
NvCplGetScalingStatus
NvCplGetThermalSettings
NvCplGetViewConfiguration
NvCplHandleDVIHotPlug
NvCplIndicatorNotify
NvCplInitializePC
NvCplManageUserSettings
NvCplMonitorDetection
NvCplOpkSupport
NvCplPCSetup
NvCplPCSetupCL
NvCplPrimaryPop
NvCplPrimaryPush
NvCplReduceOrphanedDualViewDisplays
NvCplResetToLastActive
NvCplResetToLastMode
NvCplRscMgrLoadDialogCtrlStrings
NvCplRscMgrLoadString
NvCplSetDebugLevel
NvCplSetDigitalVibranceLevel
NvCplSetDisplayMode
NvCplSetExtendedMode
NvCplUpdateClrSchemes
NvCplUpdatePersistData
NvCplValidatePCSetup
NvCycleDisplayDevice
NvCycleDisplayDeviceEx
NvDeleteTaskbarMenuItems
NvGetFullScreenVideoMirroringEnabled
NvGetProjectedGDIModeList
NvGetTaskbarMenuItems
NvGetWindowsDisplayState
NvHandleOwnerDrawMessages
NvQTwDispModeWarning
NvQTwGetCurrentMode
NvQTwHandleDFPResWarning
NvQTwLaunchOvlCtrlPage
NvQueryMenuInit
NvRefreshDisplaySettingsPage
NvSetFullScreenVideoMirroringEnabled
NvStartup
NvTaskBarMenuCmd
NvValidateNvidiaCapable
ProcessLidChange
dtcfg
dtcfgex
easysetview
exportstate
launchoverlayapplet
launchpowermizerapplet
launchtvapplet
nvGetPwrMzrLevel
nvSetPwrMzrLevel
resetview
scaleview
setview
updategamma
updateview

Sections

.text
Size: 968KB - Virtual size: 966KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d60e21805cce5ae7831bf24641aa85de

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

version

ole32

oleaut32

comctl32

comdlg32

winspool.drv

Exports

Exports

Sections

.text Size: 968KB - Virtual size: 966KB

.rdata Size: 56KB - Virtual size: 52KB

.data Size: 148KB - Virtual size: 203KB

.rsrc Size: 3.3MB - Virtual size: 3.3MB

.reloc Size: 88KB - Virtual size: 87KB

.text
Size: 968KB - Virtual size: 966KB

.rdata
Size: 56KB - Virtual size: 52KB

.data
Size: 148KB - Virtual size: 203KB

.rsrc
Size: 3.3MB - Virtual size: 3.3MB

.reloc
Size: 88KB - Virtual size: 87KB