AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
General
-
Target
gzdoom.exe
-
Size
9.5MB
-
MD5
db872aa11b517eaa8b7cba35382c9027
-
SHA1
0fd999eaf675727db107de98352a89bac8806ef2
-
SHA256
fe177010b25afc131eaab1cafc0abc8d76cdf1f16e33fc8952ef507cb692bfcb
-
SHA512
0e24fb083f1fdec88492fd426554220b12a09dd99f10ca11e416799181ff872cefa44eab19bca1e54762c87fbd76366d3a5ef8bd9268bd0fc706d6b39349ee8f
-
SSDEEP
98304:79hKIdyEDWhruGaY23Xy9ZdepHu/bJ6BUNe6PT1wusSzLF:7DLxWRnqXGZd5/bJ6yU6T1QSzB
Score
N/A
Malware Config
Signatures
Files
-
gzdoom.exe.exe windows x64
5853b74180e70cc3aa4f14abe263a298
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
wsock32
inet_addr
ntohl
recvfrom
sendto
ioctlsocket
gethostbyname
WSAStartup
WSACleanup
WSAGetLastError
htons
inet_ntoa
closesocket
socket
bind
winmm
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
ole32
CoUninitialize
CoTaskMemFree
CoInitialize
user32
DispatchMessageW
PeekMessageW
DefWindowProcW
PostQuitMessage
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetKeyState
MapVirtualKeyW
TranslateMessage
ReleaseCapture
InvalidateRect
AdjustWindowRectEx
SetCursor
GetWindowLongW
GetRawInputData
GetForegroundWindow
RegisterRawInputDevices
GetClientRect
GetWindowRect
SetCursorPos
GetCursorPos
ClientToScreen
SetForegroundWindow
GetFocus
GetActiveWindow
SetFocus
SetCapture
ClipCursor
GetClassLongPtrW
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetRawInputDeviceInfoW
ShowWindow
GetDC
ReleaseDC
MessageBoxA
EnumDisplaySettingsW
GetMessageW
SendMessageW
PostMessageW
ScreenToClient
SetWindowTextA
GetUpdateRect
EndPaint
BeginPaint
CallWindowProcW
SendMessageA
GetDesktopWindow
UnregisterClassW
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
GetMonitorInfoA
IsZoomed
CreateIconIndirect
DestroyCursor
SetClassLongPtrW
GetWindowTextW
GetAsyncKeyState
EndDialog
DialogBoxParamW
MapDialogRect
IsDialogMessageW
LoadImageW
LoadIconW
LoadCursorW
GetParent
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
SetRect
FillRect
MessageBoxW
GetWindowTextLengthW
SetWindowTextW
DrawIcon
GetSystemMetrics
KillTimer
SetTimer
SendDlgItemMessageW
SetDlgItemTextW
SetDlgItemTextA
GetDlgItem
CreateDialogParamW
SetWindowPos
MoveWindow
DestroyWindow
CreateWindowExW
RegisterClassW
gdi32
DPtoLP
GetObjectW
SetMapMode
SetBkColor
GetMapMode
BitBlt
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
SwapBuffers
CreateDIBSection
SetPixelV
Rectangle
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
TextOutW
GetTextMetricsW
SetTextAlign
SetTextColor
SetBkMode
SelectObject
GetTextExtentPoint32W
GetStockObject
DeleteObject
CreateSolidBrush
CreateFontIndirectW
GetDeviceCaps
comctl32
ord17
comdlg32
GetSaveFileNameW
dbghelp
SymGetSymFromAddr64
SymInitialize
SymGetLineFromAddr64
ImageNtHeader
SymCleanup
zmusic
ZMusic_SetCallbacks
ZMusic_IdentifyMIDIType
ZMusic_SetWgOpn
ZMusic_SetDmxGus
ZMusic_CreateMIDISource
ZMusic_MIDIDumpWave
ZMusic_VolumeChanged
ZMusic_WriteSMF
ZMusic_GetStats
ChangeMusicSettingString
ZMusic_Stop
ZMusic_SetGenMidi
ZMusic_IsMIDI
ZMusic_IsLooping
ZMusic_Close
ZMusic_SetSubsong
ZMusic_GetLastError
ZMusic_GetMidiDevices
ChangeMusicSettingInt
FindLoopTags
ZMusic_IsPlaying
SoundDecoder_Close
ZMusic_Update
ZMusic_Resume
SoundDecoder_Read
SoundDecoder_GetInfo
CreateDecoder
ChangeMusicSettingFloat
ZMusic_GetStreamInfo
ZMusic_Pause
ZMusic_Start
ZMusic_FillStream
ZMusic_GetADLBanks
ZMusic_OpenSong
psapi
GetModuleInformation
advapi32
RegSetValueExW
RegCreateKeyExW
GetUserNameW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
kernel32
CreateTimerQueue
VirtualFree
VirtualProtect
VirtualAlloc
UnregisterWaitEx
ReleaseSemaphore
UnregisterWait
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
SetLastError
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
LoadLibraryExW
FreeLibraryAndExitThread
GetThreadTimes
TerminateProcess
InitializeSListHead
GetStartupInfoW
UnhandledExceptionFilter
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
DecodePointer
EncodePointer
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
FreeLibraryWhenCallbackReturns
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
SetStdHandle
AcquireSRWLockShared
ReleaseSRWLockShared
RaiseException
RtlPcToFileHeader
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
RtlUnwindEx
RtlUnwind
GetModuleHandleExW
GetCommandLineA
ExitThread
HeapSize
CreateDirectoryW
GetFileAttributesExW
GetDriveTypeW
GetFileType
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
DeleteFileW
RemoveDirectoryW
GetConsoleOutputCP
FlushFileBuffers
GetConsoleMode
SetFilePointerEx
LCMapStringEx
GetFileSizeEx
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetNativeSystemInfo
SwitchToThread
WaitForSingleObjectEx
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateMutexW
ReleaseMutex
IsProcessorFeaturePresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFreeEx
VirtualAllocEx
GetSystemInfo
WaitNamedPipeW
PeekNamedPipe
MultiByteToWideChar
lstrlenW
FindNextFileW
FindFirstFileW
FindClose
WideCharToMultiByte
HeapFree
HeapReAlloc
HeapCreate
RtlLookupFunctionEntry
RtlDeleteFunctionTable
RtlAddFunctionTable
IsDebuggerPresent
VirtualQuery
GetExitCodeThread
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEndOfFile
CreateEventExW
GetStdHandle
GetLastError
SleepEx
GetCurrentProcess
SetPriorityClass
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalAlloc
GlobalUnlock
GlobalLock
LoadLibraryW
RtlCaptureContext
GetFileInformationByHandle
WriteFile
CloseHandle
DuplicateHandle
SetUnhandledExceptionFilter
HeapAlloc
GetProcessHeap
Sleep
QueueUserAPC
ExitProcess
GetCurrentThread
GetCurrentThreadId
GetModuleFileNameW
AllocConsole
AttachConsole
SetConsoleMode
ReadConsoleW
FlushConsoleInputBuffer
GetCurrentConsoleFontEx
SetCurrentConsoleFontEx
GetCommandLineW
GetModuleHandleW
MulDiv
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
SetThreadPriority
GetVersionExW
GetModuleHandleA
LocalFree
GetProcessAffinityMask
SetThreadAffinityMask
FormatMessageA
GetNumaProcessorNode
WriteConsoleW
SetConsoleTextAttribute
GetEnvironmentVariableW
CreateFileW
GetFullPathNameW
RtlVirtualUnwind
GetFileSize
GetTempFileNameW
ReadFile
SetFilePointer
GetTempPathW
WaitForSingleObject
GetCurrentProcessId
CreateThread
shell32
ShellExecuteW
SHGetKnownFolderPath
ShellExecuteA
d3d9
Direct3DCreate9Ex
Exports
Exports
Sections
.text Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 445KB - Virtual size: 10.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
creg Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
freg Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
areg Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
yreg Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
greg Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rodata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 303KB - Virtual size: 303KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ