NvOptimusEnablement
Resubmissions
22-03-2023 19:29
230322-x7m9qsch2z 3Static task
static1
General
-
Target
d971e1835a0c3f3ae26782e13b1ab34c6b373a0edadab92a092c81f0ea998860.exe
-
Size
692KB
-
MD5
1e73d9e5eb513b7449d66359bac44b6d
-
SHA1
1be903d55f92c7a58d39ddcd64f7c9aa240629a4
-
SHA256
d971e1835a0c3f3ae26782e13b1ab34c6b373a0edadab92a092c81f0ea998860
-
SHA512
a33aac5089293ece3b60f08e6f154c7b6b6eee13559ad101ddf5ca2a3ccb43bfb1ab9347e25d758fbc7be69c23215c3b66c8441a16c09cbc4a0da5309c732c26
-
SSDEEP
12288:UwwDgdIvFfkLe5j35cki0irlyv/cM6lUYBrmUkL+94VVw3ZUjilV0RGeZwNNzB+Y:M0IvEaMdrl6UmUY+94VwCil2/wNNB+/Y
Score
1/10
Malware Config
Signatures
Files
-
d971e1835a0c3f3ae26782e13b1ab34c6b373a0edadab92a092c81f0ea998860.exe.exe windows x86
f2013e99656ffaf909bb875cbcc50a1b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsRelativeW
kernel32
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFileAttributesW
GetFullPathNameW
OutputDebugStringW
SetLastError
CreateProcessA
CreateProcessW
GetSystemDirectoryW
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryExW
lstrcmpA
lstrcmpW
VerifyVersionInfoW
FileTimeToSystemTime
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
OutputDebugStringA
Sleep
GetCurrentThreadId
ProcessIdToSessionId
GetSystemTime
GetSystemTimeAsFileTime
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetModuleHandleExW
MoveFileW
MultiByteToWideChar
WideCharToMultiByte
RemoveVectoredContinueHandler
Process32FirstW
Process32NextW
CreateDirectoryW
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
GetCurrentDirectoryW
GetErrorMode
SetErrorMode
GetCommandLineW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
GetFileSizeEx
HeapReAlloc
HeapSize
ReadConsoleW
ReadFile
GetStringTypeW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
GetConsoleMode
IsValidCodePage
FindFirstFileExW
GetConsoleCP
FlushFileBuffers
AddVectoredContinueHandler
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
SetUnhandledExceptionFilter
RtlCaptureStackBackTrace
GetModuleHandleW
WaitForMultipleObjects
OpenEventW
LocalFree
LocalAlloc
OpenProcess
CreateThread
GetCurrentProcessId
CreateEventW
WaitForSingleObject
SetEvent
GetLastError
CloseHandle
GetCurrentProcess
GetProcessTimes
SetDefaultDllDirectories
SetEndOfFile
CreateToolhelp32Snapshot
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetStdHandle
GetFileType
WriteConsoleW
WriteFile
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThread
SetConsoleCtrlHandler
SetFilePointerEx
user32
LoadStringW
PeekMessageW
GetMessageW
ShutdownBlockReasonDestroy
ShutdownBlockReasonCreate
SetWindowLongW
GetWindowLongW
DestroyWindow
PostThreadMessageW
UnregisterClassW
RegisterClassW
DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
CreateWindowExW
shell32
CommandLineToArgvW
advapi32
RegSetKeyValueW
RegOpenKeyExW
GetUserNameW
BuildExplicitAccessWithNameW
SetSecurityInfo
GetSecurityInfo
SetEntriesInAclW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerExW
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
ChangeServiceConfigW
RegGetValueW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
LookupAccountSidW
CreateWellKnownSid
OpenProcessToken
Exports
Exports
Sections
.text Size: 461KB - Virtual size: 461KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ