AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
_1
_2
_3
Static task
static1
General
-
Target
ext.dll
-
Size
840KB
-
MD5
711d94f4ad6029c9c917071e1ce753f8
-
SHA1
257842f371db600ab6dc378dee633c4476acef06
-
SHA256
4ac6b46be827e7afe74fe762b345b80105c4ca8c8ba0338366d123313fc00f0f
-
SHA512
1d651a88ff4712690130e7fd41c0654617d43b94538b5c229f15f215bf31d79f423adf49d8d208b9f1459c639aed56c450f6a55e9f5f56cc89b62467af8bda12
-
SSDEEP
12288:8cH7BxJzXhXw/HRhlm1RxJHzUmtuJg+sffl0m6XzUCJoOl3eMu:8aFx/+xhcfQm8JgpfflPIQCJXi
Score
1/10
Malware Config
Signatures
Files
-
ext.dll.dll windows x64
f944ab364d87a63710ca833ac808f1c0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualProtect
GetModuleHandleA
GetCommandLineA
GetModuleHandleExA
LoadLibraryA
GetProcAddress
FreeLibrary
VirtualFree
VirtualAlloc
GetSystemInfo
FlushInstructionCache
IsDebuggerPresent
OutputDebugStringW
RaiseException
EnterCriticalSection
LeaveCriticalSection
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
Sleep
GetCurrentThreadId
GetExitCodeThread
GetCurrentDirectoryW
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
AreFileApisANSI
GetModuleHandleW
GetFileInformationByHandleEx
WideCharToMultiByte
LocalFree
GetLocaleInfoEx
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
IsProcessorFeaturePresent
GetModuleHandleExW
FlsAlloc
FlsGetValue
FlsFree
GetSystemTimeAsFileTime
EncodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlUnwind
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
GetStdHandle
GetFileType
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
HeapSize
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
WriteConsoleW
SetEndOfFile
DeleteFileW
MultiByteToWideChar
GetModuleFileNameW
lstrlenW
WaitNamedPipeW
GetCurrentProcessId
CloseHandle
CreateFileW
PeekNamedPipe
WriteFile
ReadFile
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteCriticalSection
DecodePointer
GetLastError
InitializeCriticalSectionEx
GetCurrentProcess
FlsSetValue
CreateFileA
MoveFileExA
FormatMessageW
SleepEx
GetEnvironmentVariableA
VerifyVersionInfoW
GetTickCount
GetSystemDirectoryA
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
InitializeCriticalSection
TerminateProcess
user32
GetForegroundWindow
MessageBoxA
shell32
SHGetKnownFolderPath
ole32
CoTaskMemFree
ntdll
RtlPcToFileHeader
VerSetConditionMask
advapi32
CryptAcquireContextA
RegSetValueExW
RegCreateKeyExW
RegCloseKey
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
crypt32
CryptDecodeObjectEx
CertFreeCertificateChainEngine
CertFindCertificateInStore
CertCloseStore
CertEnumCertificatesInStore
CryptStringToBinaryA
CertFreeCertificateContext
PFXImportCertStore
CertGetCertificateChain
CertAddCertificateContextToStore
CryptQueryObject
CertFreeCertificateChain
CertGetNameStringA
CertFindExtension
CertCreateCertificateChainEngine
CertOpenStore
ws2_32
socket
getsockname
getpeername
bind
htonl
freeaddrinfo
getaddrinfo
listen
accept
ioctlsocket
WSASetLastError
recv
__WSAFDIsSet
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSAResetEvent
send
WSAWaitForMultipleEvents
getsockopt
WSAEnumNetworkEvents
WSACleanup
WSAStartup
select
connect
htons
WSAIoctl
setsockopt
closesocket
WSAGetLastError
ntohs
bcrypt
BCryptGenRandom
Exports
Exports
Sections
.text Size: 594KB - Virtual size: 593KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ