NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
BeamNG.drive.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
BeamNG.drive.exe
Resource
win10v2004-20220812-en
General
-
Target
BeamNG.drive.exe
-
Size
1.6MB
-
MD5
6620df3e90e56e3f098c9114717cc3e7
-
SHA1
7c529ab7234a25692556d4f285f095a752b0d7bb
-
SHA256
5547bc252a8ec384201941f8ef53e9a0d0d1510528a7e51feb9adccf9038c53d
-
SHA512
de02c01be80cc47c52461d79a52aa2bcb49e2a1f6ac6fa1b5199b0e5f6335ef47d2d3a0f6d116a39ca16e50c77272b7f9e9801a2272fa522cbb24f36dd1261e3
-
SSDEEP
49152:ajdT/Sa2DjWrCNk4qBA4g9HalutC7heC:ah/SaB4139HaluAV
Malware Config
Signatures
Files
-
BeamNG.drive.exe.exe windows x86
55cf5c1c3ff5c2ff2921e28d067895b0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
ws2_32
bind
closesocket
htons
sendto
ntohl
htonl
gethostname
ioctlsocket
listen
accept
recvfrom
freeaddrinfo
getaddrinfo
WSAIoctl
setsockopt
ntohs
getsockopt
socket
getpeername
connect
send
recv
WSASetLastError
select
__WSAFDIsSet
WSAGetLastError
WSACleanup
WSAStartup
getsockname
advapi32
OpenProcessToken
RegDeleteValueW
RegSetValueExW
RegCreateKeyExA
RegSetValueExA
RegSetKeyValueW
RegGetValueW
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
RegOpenKeyExA
crypt32
CertFreeCertificateContext
CryptStringToBinaryA
CertAddCertificateContextToStore
CertFindCertificateInStore
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertGetNameStringA
CertCloseStore
CertOpenStore
shlwapi
PathFileExistsW
PathIsDirectoryEmptyW
kernel32
ExitProcess
GetModuleHandleExW
ExitThread
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
MoveFileExW
GetDriveTypeW
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
SetStdHandle
GetConsoleMode
ReadConsoleW
GetConsoleCP
HeapFree
HeapAlloc
HeapReAlloc
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetACP
GetOEMCP
RtlUnwind
RaiseException
UnregisterWaitEx
QueryDepthSList
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
CloseHandle
WaitForSingleObject
CreateProcessW
GetCommandLineA
GetCommandLineW
SetUnhandledExceptionFilter
SetErrorMode
LocalFree
GetModuleHandleW
VerSetConditionMask
GetStdHandle
CreateFileW
WriteFile
DuplicateHandle
GetLastError
WaitNamedPipeW
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
OpenProcess
GlobalMemoryStatusEx
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
GlobalAlloc
GlobalUnlock
GlobalLock
FormatMessageW
VerifyVersionInfoW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
QueryPerformanceCounter
GetEnvironmentStringsW
GetSystemInfo
GetVersionExW
AllocConsole
FreeConsole
SetConsoleTitleW
RemoveDirectoryW
CopyFileW
MoveFileW
CancelIo
WaitForMultipleObjectsEx
ReadDirectoryChangesW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
SleepEx
GetTickCount64
WaitForSingleObjectEx
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
VerifyVersionInfoA
ExpandEnvironmentStringsA
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
SetLastError
FormatMessageA
CreateFileA
GetFileSizeEx
DeleteFileW
FindFirstFileExW
FlushFileBuffers
GetFileAttributesExW
SetFilePointer
InitializeCriticalSection
CreateThread
GetCurrentThreadId
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
WriteConsoleW
InterlockedDecrement
InterlockedIncrement
InterlockedExchangeAdd
LocalAlloc
GetSystemDirectoryW
LoadLibraryExW
lstrcmpW
ExpandEnvironmentStringsW
GetFullPathNameW
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualFree
VirtualProtect
VirtualAlloc
FreeLibraryAndExitThread
GetThreadTimes
GetCurrentThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
CreateTimerQueue
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
ResetEvent
SetEvent
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTickCount
FreeEnvironmentStringsW
GetProcessHeap
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
HeapSize
QueryPerformanceFrequency
FileTimeToSystemTime
GetDiskFreeSpaceExW
GetFileInformationByHandle
SetEndOfFile
SetFilePointerEx
SetFileTime
GetTempPathW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
SwitchToThread
GetExitCodeThread
TryEnterCriticalSection
GetStringTypeW
EncodePointer
DecodePointer
GetCPInfo
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
user32
MessageBoxW
SendMessageW
PostMessageW
GetSystemMetrics
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
LoadIconW
MessageBoxA
shell32
ShellExecuteW
CommandLineToArgvW
SHGetKnownFolderPath
SHGetFolderPathW
ShellExecuteA
ole32
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
CoInitialize
oleaut32
SysFreeString
SysAllocString
comctl32
ord345
powrprof
PowerGetActiveScheme
PowerSetActiveScheme
Exports
Exports
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 234KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ