AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
1 signatures
General
-
Target
Archvale.v1.3.rar
-
Size
654.0MB
-
MD5
08b55d95c2dedb66677017f6d2bea1eb
-
SHA1
e8a0d8e467d185efe4d54b14b75f923b6112b798
-
SHA256
ab7c60565314490c131c85bb494753412e175c8c4f981fc3a758b10a4853d77a
-
SHA512
377fc81432cdb30cf1bd9a01431e0d0c33dbff8388a901864c3137732e36f14c748cc43dd7c693c0f93994e0630e8d7c34c8305870a0f4dda0e75879219ea5a4
-
SSDEEP
12582912:GUdw1v1blIh1tn3ZCvC5RsAS8xG8+j6nls1X6TcqLWErliuxakIIYyBoogWn4Cc0:7w11Oln3Mv4B8Juls1XCcqLWqlZ5UCh
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Archvale.v1.3/Archvale.v1.3/Archvale.exe
Files
-
Archvale.v1.3.rar.rar
-
Archvale.v1.3/Archvale.v1.3/AV_gms2_3.exp
-
Archvale.v1.3/Archvale.v1.3/AV_gms2_3.lib
-
Archvale.v1.3/Archvale.v1.3/Archvale.exe.exe windows x86
01aade4049b4f60dd572f92d57349979
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetReadFile
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetOpenA
InternetCanonicalizeUrlA
InternetConnectA
InternetCrackUrlA
InternetGetConnectedState
d3d11
D3D11CreateDevice
dbghelp
MiniDumpWriteDump
winmm
timeBeginPeriod
timeEndPeriod
joyGetPosEx
joyGetPos
mciSendStringA
timeGetDevCaps
ws2_32
setsockopt
sendto
send
select
recvfrom
recv
ntohs
listen
inet_ntoa
inet_addr
getsockopt
ioctlsocket
connect
closesocket
bind
accept
htons
htonl
WSAStartup
WSAGetLastError
getaddrinfo
freeaddrinfo
getpeername
__WSAFDIsSet
socket
gdiplus
GdiplusStartup
GdiplusShutdown
comctl32
InitCommonControlsEx
kernel32
DecodePointer
GetStringTypeW
SetStdHandle
GetProcessHeap
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapAlloc
HeapFree
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
HeapWalk
HeapValidate
ReadFile
SetFileAttributesW
GetFileAttributesExW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
WriteFile
GetStdHandle
GetModuleHandleExW
LoadLibraryExW
EncodePointer
RaiseException
RtlUnwind
GetConsoleCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
OutputDebugStringA
GetCommandLineW
ExpandEnvironmentStringsW
CreateDirectoryW
CreateFileW
GetFinalPathNameByHandleW
GetFullPathNameW
GetLastError
SetErrorMode
Sleep
GetModuleFileNameW
MoveFileA
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
GetTickCount
CreateWaitableTimerW
GetEnvironmentVariableW
GetCurrentDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
LoadLibraryW
SetLastError
CreateThread
GetExitCodeThread
LocalFree
FormatMessageW
GetVersionExW
GetLocaleInfoW
GetUserDefaultLCID
GetConsoleWindow
SetCurrentDirectoryA
GetCurrentDirectoryA
FreeLibrary
SetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalAlloc
GlobalLock
GlobalUnlock
ExitProcess
lstrlenA
CreateEventExW
HeapReAlloc
ReadConsoleW
MoveFileExW
HeapSize
FlushFileBuffers
SetEndOfFile
WriteConsoleW
GetStartupInfoW
user32
GetWindowRect
AdjustWindowRectEx
SetCursorPos
GetCursorPos
SetWindowLongW
ChangeDisplaySettingsW
EnumDisplaySettingsW
MonitorFromWindow
GetMonitorInfoW
GetDC
ReleaseDC
DefWindowProcW
RegisterClassExW
CreateWindowExW
DestroyWindow
BringWindowToTop
GetKeyState
SetCapture
ReleaseCapture
SetForegroundWindow
GetClientRect
SetCursor
LoadCursorW
LoadImageW
OpenClipboard
CloseClipboard
SetClipboardData
UpdateWindow
EmptyClipboard
IsClipboardFormatAvailable
GetFocus
MoveWindow
SetWindowTextW
ClientToScreen
MapWindowPoints
CreateDialogParamW
DialogBoxParamW
EndDialog
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
DrawTextW
ScreenToClient
GetAsyncKeyState
keybd_event
SetDlgItemTextA
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetSystemMetrics
SetProcessDPIAware
IsDialogMessageW
SetFocus
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
wsprintfW
MessageBoxA
SetWindowPos
ShowWindow
SendMessageW
GetActiveWindow
GetClipboardData
MessageBoxW
gdi32
SelectObject
GetDeviceCaps
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shell32
SHGetFolderPathW
ShellExecuteW
ole32
CoCreateFreeThreadedMarshaler
CoInitialize
CoTaskMemFree
CoCreateInstance
dxgi
CreateDXGIFactory1
rpcrt4
UuidToStringW
UuidCreate
dwmapi
DwmGetCompositionTimingInfo
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Exports
Exports
Sections
.text Size: 66.7MB - Virtual size: 66.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.5MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mydata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Archvale.v1.3/Archvale.v1.3/data.win