Static task
static1
Behavioral task
behavioral1
Sample
Driv3r.exe
Resource
win10-20230220-es
General
-
Target
Driv3r.exe
-
Size
3.9MB
-
MD5
26ab2f2571093721e0b33b2987e26459
-
SHA1
7e68f985e9bfc859578717fc130800e6d3c7eed6
-
SHA256
c91a1f68e7d5cb5f70fbd4ec077a44659dc9ff7950d37a6e758ce44dd47efe04
-
SHA512
e6e4c4c950171dbf08c2434674442862aa43fac2aa279e47c81f8517c32e22b742b48ebf538e1e62ab795b36f033edf8d2c5ba4523fddc74c219a7ad1223da35
-
SSDEEP
49152:BTgXsPpzLrqANTXp9DfEtwc+oGPTTv/Atb2DPL7gca2Fb1zloPAb:dgUlnTXffEXv2DvVfFbgPAb
Malware Config
Signatures
Files
-
Driv3r.exe.exe windows x86
81d288081a91928e526ab9235011e1f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathUnquoteSpacesA
PathRemoveArgsA
PathRemoveFileSpecA
PathAddBackslashA
PathStripPathA
kernel32
CreateFileA
GetLastError
ReadFile
WriteFile
CloseHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetFileSize
LeaveCriticalSection
EnterCriticalSection
Sleep
GetCommandLineA
GetLocalTime
FileTimeToSystemTime
FindClose
SetFilePointer
CreateDirectoryA
RemoveDirectoryA
FindNextFileA
DeleteFileA
FindFirstFileA
GetOverlappedResult
GetTickCount
GlobalFree
GetCommandLineW
SetEvent
ResetEvent
TryEnterCriticalSection
CreateThread
QueryPerformanceFrequency
WaitForSingleObject
SetEndOfFile
GetProcessHeap
lstrcmpiA
GetFullPathNameA
InterlockedCompareExchange
UnmapViewOfFile
CreateFileW
CreateFileMappingA
MapViewOfFile
IsProcessorFeaturePresent
GetLocaleInfoW
SetStdHandle
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
CreateEventA
InterlockedIncrement
GetStringTypeA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
RtlUnwind
ExitProcess
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetVersionExA
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapSize
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FlushFileBuffers
GetACP
GetOEMCP
GetStdHandle
UnhandledExceptionFilter
user32
GetKeyboardState
SetRect
GetClientRect
MessageBoxA
DefWindowProcA
ScreenToClient
SetCursor
keybd_event
PostThreadMessageA
MsgWaitForMultipleObjects
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetForegroundWindow
GetWindowLongA
GetParent
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
DestroyWindow
UnregisterClassA
shell32
CommandLineToArgvW
ole32
CoUninitialize
CoCreateInstance
CoInitialize
d3d9
Direct3DCreate9
dinput8
DirectInput8Create
dsound
ord11
ord2
binkw32
_BinkDoFrame@4
_BinkOpen@8
_BinkSetSoundTrack@8
_BinkSetVolume@12
_BinkOpenDirectSound@4
_BinkSetSoundSystem@8
_BinkNextFrame@4
_BinkCopyToBuffer@28
_BinkWait@4
_BinkClose@4
gdi32
DeleteObject
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 700KB - Virtual size: 697KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 336KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ