Static task
static1
Behavioral task
behavioral1
Sample
realesrgan-ncnn-vulkan.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
realesrgan-ncnn-vulkan.exe
Resource
win10v2004-20230220-en
General
-
Target
realesrgan-ncnn-vulkan.exe
-
Size
5.9MB
-
MD5
159c4671f4ec7dd6e119a99e00ed3fc0
-
SHA1
ad56db08001a816070fa44a41e6dc34bfb85a0ad
-
SHA256
07e49f7cbb4ede01ae4dd4c399d3a7e5846e3d2085c3128eff881e55cb7b1a0c
-
SHA512
9c6ba20e269b771c9d8f11ff6d3803f0e2a9badff1191a7c3b2e2ab674d81905f2cb54dbf4b4d5cdbdf3ef5b02ddac7e87a7a11058c4ead08dec89243adef124
-
SSDEEP
98304:rfpKKXrbsQ4Gk6KIZtGUD1WHzpd7GfKQxTbKxtMvq:rfpKKXrbsQ4rIZttD1WHzpd7GfKQxTb4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource realesrgan-ncnn-vulkan.exe
Files
-
realesrgan-ncnn-vulkan.exe.exe windows x64
0bf81a93f169afaadfb121a011bcc112
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
vulkan-1
vkCreateShaderModule
vkDestroyPipeline
vkDestroyDescriptorSetLayout
vkDestroyPipelineLayout
vkDestroyShaderModule
vkGetBufferMemoryRequirements
vkMapMemory
vkCreateImage
vkInvalidateMappedMemoryRanges
vkBindBufferMemory
vkAllocateMemory
vkDestroyBuffer
vkFlushMappedMemoryRanges
vkCreateBuffer
vkUnmapMemory
vkFreeMemory
vkBindImageMemory
vkCreateImageView
vkGetImageMemoryRequirements
vkResetFences
vkCreateFence
vkWaitForFences
vkCreateSemaphore
vkAllocateDescriptorSets
vkQueueSubmit
vkBeginCommandBuffer
vkDestroyImage
vkCreateDescriptorPool
vkCmdPipelineBarrier
vkCmdCopyImage
vkCmdBindPipeline
vkDestroyImageView
vkAllocateCommandBuffers
vkDestroyFence
vkCreateCommandPool
vkUpdateDescriptorSets
vkDestroyDescriptorPool
vkEndCommandBuffer
vkCmdPushConstants
vkResetCommandBuffer
vkFreeDescriptorSets
vkCmdCopyBuffer
vkCmdBindDescriptorSets
vkDestroySemaphore
vkFreeCommandBuffers
vkCmdDispatch
vkDestroyCommandPool
vkCmdCopyBufferToImage
vkCmdCopyImageToBuffer
vkCreateSampler
vkEnumerateInstanceExtensionProperties
vkCreateComputePipelines
vkDestroySampler
vkEnumerateDeviceExtensionProperties
vkDestroyInstance
vkEnumeratePhysicalDevices
vkCreateDescriptorSetLayout
vkGetPhysicalDeviceProperties
vkCreatePipelineLayout
vkGetInstanceProcAddr
vkGetDeviceQueue
vkGetPhysicalDeviceQueueFamilyProperties
vkGetDeviceProcAddr
vkGetPhysicalDeviceMemoryProperties
vkDestroyDevice
vkCreateDevice
vkCreateInstance
ole32
CoInitializeEx
CoCreateInstance
kernel32
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
RtlUnwind
WriteConsoleW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FlushFileBuffers
GetFileSizeEx
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
GetFileType
ReadConsoleW
GetConsoleMode
GetCommandLineW
GetCommandLineA
WriteFile
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
ReadFile
LoadLibraryExW
FreeLibrary
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
InitializeSRWLock
FindFirstFileExW
GetFullPathNameW
FindNextFileW
GetModuleFileNameW
WakeConditionVariable
InitializeConditionVariable
FindClose
WaitForSingleObject
GetFileAttributesW
GetLastError
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
CloseHandle
SleepConditionVariableSRW
TlsAlloc
TlsFree
SleepConditionVariableCS
EnterCriticalSection
SetThreadPriority
LeaveCriticalSection
InitializeCriticalSectionEx
WaitForSingleObjectEx
DeleteCriticalSection
TlsSetValue
CreateMutexA
ReleaseMutex
TlsGetValue
GetModuleHandleW
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
SetUnhandledExceptionFilter
LocalFree
FormatMessageA
LCMapStringEx
CreateDirectoryW
CreateFileW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
EncodePointer
DecodePointer
UnhandledExceptionFilter
oleaut32
VariantInit
vcomp140
omp_get_max_threads
_vcomp_for_static_end
_vcomp_for_static_init
_vcomp_for_static_simple_init
_vcomp_fork
_vcomp_set_num_threads
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ