AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
hx_cffi
Static task
static1
General
-
Target
Kade Engine.exe
-
Size
16.1MB
-
MD5
987275d1e083cfa51762966fd07306a6
-
SHA1
7e0f4086ffef8f20a5118c1c085dc2d6be2b9f05
-
SHA256
80eda45fc6bbc22776ec292d373407860da1651dcf0945a7d9afa33acab56e95
-
SHA512
9efe6a2c8574bd351a672bb88fe747af92f2aa420b445655f66963e3a1cb9fcbca3d6e81b6995a6847da9f2b43904570318d343edd2b14185f33accff96fae66
-
SSDEEP
393216:7G03CNgnAfsMvLw7/aN8X7rULU03PAmks:Q0rUL9Q
Score
1/10
Malware Config
Signatures
Files
-
Kade Engine.exe.exe windows x64
1dfc36104f6a06041507ac57e3637d5d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
user32
MessageBoxA
ws2_32
getaddrinfo
WSAGetLastError
WSAStartup
gethostbyname
socket
shutdown
setsockopt
send
freeaddrinfo
inet_ntoa
inet_addr
htons
ioctlsocket
connect
closesocket
recv
advapi32
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
RegCloseKey
RegSetKeyValueW
RegQueryValueExW
CryptAcquireContextA
RegCreateKeyExW
crypt32
CertEnumCertificatesInStore
CertOpenSystemStoreA
CertCloseStore
kernel32
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
GetFileAttributesExW
SetEnvironmentVariableW
GetFileSizeEx
SetFilePointerEx
FreeEnvironmentStringsW
ReadConsoleW
GetConsoleMode
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
OutputDebugStringW
FindFirstFileExW
GetCommandLineW
GetProcessHeap
HeapSize
SetEndOfFile
FlushFileBuffers
ReleaseSRWLockExclusive
TlsGetValue
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTime
SystemTimeToFileTime
RtlCaptureContext
TlsSetValue
TlsAlloc
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetCurrentThreadId
FreeLibrary
GetProcAddress
LoadLibraryW
GetCommandLineA
LoadLibraryA
ReadFile
WriteFile
DuplicateHandle
CreatePipe
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetCurrentProcessId
FormatMessageA
SetCurrentDirectoryW
GetCurrentDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFullPathNameW
Sleep
GetModuleFileNameW
GetLastError
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
PeekNamedPipe
WaitNamedPipeW
RtlUnwindEx
RaiseException
SetLastError
VirtualFree
VirtualQuery
GetModuleHandleA
LoadLibraryExA
GetModuleFileNameA
GetModuleHandleExA
VirtualAlloc
VirtualProtect
WaitForSingleObjectEx
GetExitCodeThread
InitializeSRWLock
RtlUnwind
AcquireSRWLockExclusive
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
CreateEventW
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
InitializeSListHead
GetTimeFormatW
RtlPcToFileHeader
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetStdHandle
CreateDirectoryW
DeleteFileW
MoveFileExW
GetStdHandle
WriteConsoleW
ExitThread
FreeLibraryAndExitThread
GetTempPathW
GetConsoleCP
HeapFree
HeapAlloc
GetTimeZoneInformation
GetDateFormatW
Exports
Exports
Sections
.text Size: 10.5MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.0MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 454KB - Virtual size: 454KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 458KB - Virtual size: 458KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ