nview[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

nview.dll
Size

832KB
MD5

0f85ae504bfc853e7cc6bddd0447993c
SHA1

40a37dd61fd794121c12531a9275328641dd71eb
SHA256

d4e1cba016dc182546ca17b4e528053e06f38625880712ec310d794c42a43d05
SHA512

9f2974d4bd14c7062b2f8dc645a41f51964052e3514267ff95cca80c0206e333d1436e148d65e45564a0ccc101ee9aa952a09484dfb9d748a6d69ad3e1e9a9f0
SSDEEP

6144:AP2XsmhG0iMB7bsTvCZw0o1fa2lciwtas7cXrrgZofp31bUFyiy4YToKa2HDUSWW:hXsmhG09s+xPtasAhfpdp0GKq

Score

N/A

Malware Config

Signatures

Files

nview.dll
.dll windows x86

cd6f1a07acd55b06a763ed84a112e283

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyW

advapi32

AdjustTokenPrivileges
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyW
RegEnumKeyW
RegFlushKey
RegEnumValueW
RegQueryInfoKeyW
RegEnumKeyExW
LookupPrivilegeValueW
OpenProcessToken
RegCreateKeyW

user32

LoadImageW
BeginPaint
GetClientRect
EndPaint
ValidateRect
KillTimer
GetKeyState
ClipCursor
ReleaseCapture
SetCursor
InvalidateRect
SetCapture
SetTimer
UnregisterClassW
SendDlgItemMessageW
GetDlgItem
MapWindowPoints
CheckDlgButton
SetDlgItemInt
SetDlgItemTextW
EndDialog
IsDlgButtonChecked
GetDlgItemInt
EnableWindow
DialogBoxParamW
SetForegroundWindow
SetFocus
GetCursor
GetWindowThreadProcessId
WaitForInputIdle
GetDC
ShowWindow
MoveWindow
GetWindowLongW
SetWindowLongW
UpdateWindow
ReleaseDC
GetDesktopWindow
GetWindowRect
SetWindowPos
InSendMessage
SystemParametersInfoW
wsprintfW
PostQuitMessage
SetWindowsHookExW
UnhookWindowsHookEx
DefWindowProcW
GetForegroundWindow
RegisterHotKey
SendMessageW
UnregisterHotKey
MessageBoxW
PeekMessageW
EnumWindows
PostThreadMessageW
DestroyWindow
SendMessageTimeoutW
LoadCursorW
RegisterClassW
GetParent
IsWindowVisible
ExitWindowsEx
FindWindowExW
CharNextW
RealGetWindowClassW
GetClassNameW
IsIconic
GetWindow
GetAncestor
WindowFromPoint
GetCursorPos
GetActiveWindow
GetDlgItemTextW
CreateDialogParamW
SetSystemCursor
CopyIcon
DestroyIcon
RedrawWindow
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
IsZoomed
CascadeWindows
GetAsyncKeyState
CharUpperW
ShowCursor
GetSysColor
GetWindowPlacement
GetSystemMetrics
GetWindowDC
GetWindowInfo
ScreenToClient
SetWindowTextW
RegisterClassExW
GetWindowTextW
ShowWindowAsync
GetMenuState
CheckMenuItem
AppendMenuW
CreatePopupMenu
GetMenuStringW
GetMenuItemInfoW
GetMenuItemCount
GetMenuItemID
EnableMenuItem
GetSystemMenu
DestroyMenu
DeleteMenu
RemoveMenu
TrackPopupMenuEx
GetMenuItemRect
InsertMenuW
CheckMenuRadioItem
CloseClipboard
SetClipboardData
RegisterClipboardFormatW
OpenClipboard
ClientToScreen
SetActiveWindow
SubtractRect
OffsetRect
CopyRect
EndMenu
SendInput
CallNextHookEx
EnumThreadWindows
DestroyCursor
LoadMenuW
LoadIconW
IsWindowEnabled
RealChildWindowFromPoint
PtInRect
AdjustWindowRect
DrawTextW
InvalidateRgn
GetUpdateRect
DrawMenuBar
SetMenuItemInfoW
GetSubMenu
GetMenu
SetMenu
EnumChildWindows
DrawIconEx
GetIconInfo
GetCursorInfo
UnionRect
EqualRect
GetGUIThreadInfo
FrameRect
SetWindowPlacement
ChangeDisplaySettingsW
GetTopWindow
GetClassLongW
DrawEdge
FillRect
GetSysColorBrush
BringWindowToTop
AttachThreadInput
LockSetForegroundWindow
AllowSetForegroundWindow
SetRectEmpty
SetCursorPos
GetDlgCtrlID
DrawFocusRect
GetDialogBaseUnits
SetWindowLongA
IsWindowUnicode
CallWindowProcW
DrawStateW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
IsDialogMessageW
LoadStringW
FindWindowW
IsWindow
CharLowerW
RegisterWindowMessageW
BroadcastSystemMessageW
PostMessageW
InflateRect
IsRectEmpty
EnumDisplaySettingsW
IntersectRect
CharPrevW
LoadBitmapW

gdi32

SetMapMode
GetTextMetricsW
RectInRegion
SetBkColor
GetStretchBltMode
MaskBlt
SetPixel
ExtFloodFill
ExtTextOutW
GetDIBits
GetDeviceCaps
CreateBitmap
SetTextColor
TextOutW
GetTextExtentPoint32W
GetRgnBox
CreateSolidBrush
BeginPath
EndPath
StrokeAndFillPath
PathToRegion
CreateRectRgn
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SetBkMode
CreatePen
MoveToEx
LineTo
GetObjectW
SetStretchBltMode
SetBrushOrgEx
StretchBlt
OffsetRgn
BitBlt
PtInRegion
GetStockObject
CreateFontIndirectW
DeleteObject
GetPixel
CreateDCW
ExtEscape
DeleteDC

shell32

SHGetDesktopFolder
SHAppBarMessage
SHChangeNotify
SHGetSpecialFolderLocation
ExtractIconW
ExtractIconExW
ShellExecuteW
SHGetMalloc

psapi

GetModuleFileNameExW
EnumProcesses
EnumProcessModules
GetModuleBaseNameW

ole32

CoCreateInstance
CreateStreamOnHGlobal
CoInitialize
CoUninitialize

kernel32

FatalAppExitA
EnterCriticalSection
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetModuleHandleA
SetLastError
GetVersion
GetCommandLineA
RtlUnwind
MoveFileExW
LocalAlloc
LocalFree
FreeResource
GetSystemWindowsDirectoryW
GetFileAttributesW
GetExitCodeThread
GetSystemPowerStatus
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
FlushFileBuffers
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
SetEnvironmentVariableA
HeapReAlloc
OutputDebugStringW
CompareStringW
SetThreadExecutionState
RequestWakeupLatency
Beep
GlobalDeleteAtom
GlobalAddAtomW
LeaveCriticalSection
TryEnterCriticalSection
WideCharToMultiByte
WinExec
MapViewOfFileEx
OpenFileMappingW
CloseHandle
UnmapViewOfFile
CreateFileMappingW
GetCurrentThreadId
FreeLibrary
TlsFree
HeapFree
TlsGetValue
lstrcpyW
GetCurrentProcessId
SetThreadPriority
GetThreadPriority
GetCurrentThread
TlsSetValue
HeapAlloc
GetProcessHeap
TlsAlloc
OpenMutexW
CreateMutexW
InterlockedExchangeAdd
InitializeCriticalSection
lstrcmpW
GetModuleFileNameW
lstrlenW
CreateProcessW
lstrcatW
Sleep
GetProcAddress
GetModuleHandleW
GetTickCount
GlobalFindAtomW
CreateThread
ReleaseMutex
WaitForSingleObject
OpenThread
ProcessIdToSessionId
GetVersionExW
DeleteFileW
GetEnvironmentVariableW
LoadLibraryW
QueryPerformanceCounter
QueryPerformanceFrequency
GetUserDefaultLangID
GetExitCodeProcess
TerminateProcess
OpenProcess
ExitThread
FindClose
FindFirstFileW
GetSystemDirectoryW
CreateDirectoryW
ReadFile
CreateFileW
CopyFileW
SetFileAttributesW
GetTempPathW
GetLastError
WriteFile
FindNextFileW
SetFilePointer
GetFileSize
lstrcpynW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpiW
GetCurrentProcess

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

olepro32

ord251

ddraw

DirectDrawCreate

Exports

Exports

DMAddDesktop
DMAssociate
DMEnumDesktopApplications
DMEnumDesktops
DMGetCurrentDesktop
DMGetDefaultDesktop
DMGetSetting
DMRemoveDesktop
DMSetCurrentDesktop
DMSetDefaultDesktop
DMSetSetting
DMStoreSettings
DMUpdateDesktopScreenshot
EnumNviewWindows
HKAdd
HKEnable
HKEnumActions
HKEnumCommands
HKExecute
HKGetActionParamFlags
HKGetProperty
HKRemove
HKSetProperty
HKStore
KSSetting
NVApplyDisplaySettingsDC
NVAutoStart
NVCheckDisplayStateDC
NVDesktopBrowser
NVDesktopToolbar
NVGetDisplayInfoDC
NVGetDisplayMonitorInfo
NVGetGPUInformation
NVGetHwndSpanningRect
NVGetIEVersion
NVGetMonitorName
NVGetNT4MultiViewInfo
NVGetTotalDisplayDevices
NVGetVersionDisableValue
NVIsHookLoaded
NVIsValidTaskbarStretchMode
NVLoadHook
NVMoveTaskbarToMonitor
NVOpenNViewRegKey
NVQuickWindows
NVRegisterNotificationWindow
NVResetToSingleMon
NVRunControlPanel
NVTaskSwitcher
NVUnicode
NVUnregisterNotificationWindow
NVZoomSetting
NVZoomWindowRun
NVZoomWindowState
NViewGlobalSetting
NViewNexusSetting
NViewNexusThemes
NViewShowMenu
PMCreate
PMDelete
PMEnum
PMGetCurrentProfile
PMLoad
PMLoadPresentation
PMLock
PMSave
WMClearSetting
WMEnumPersistantApps
WMExceptionSetting
WMGetActiveAppSetting
WMGetActiveSetting
WMGetSetting
WMGetSettingHWND
WMGetWindowCaps
WMSetSetting
WMSetSettingHWND
WMStoreSettings
nViewDisableHook
nViewInitialize
nViewLoadHook
nViewUnload

Sections

.text
Size: 424KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd6f1a07acd55b06a763ed84a112e283

Headers

File Characteristics

Imports

shlwapi

advapi32

user32

gdi32

shell32

psapi

ole32

kernel32

version

olepro32

ddraw

Exports

Exports

Sections

.text Size: 424KB - Virtual size: 422KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 40KB - Virtual size: 52KB

.idata Size: 16KB - Virtual size: 12KB

.shared Size: 108KB - Virtual size: 105KB

.rsrc Size: 192KB - Virtual size: 190KB

.reloc Size: 32KB - Virtual size: 29KB

.text
Size: 424KB - Virtual size: 422KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 40KB - Virtual size: 52KB

.idata
Size: 16KB - Virtual size: 12KB

.shared
Size: 108KB - Virtual size: 105KB

.rsrc
Size: 192KB - Virtual size: 190KB

.reloc
Size: 32KB - Virtual size: 29KB