AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
1 signatures
General
-
Target
gzdoom.exe
-
Size
4.1MB
-
MD5
e8ae3ca206129e778ff3e72198e4ce31
-
SHA1
40b4054903f5aa400f2e31fbbe8d862dc5e449a7
-
SHA256
80b2da6694b522156add473de9c465fb13367f0f554229e566ddb63c8d5804b4
-
SHA512
c745bca7c800097c3be44befe01715aace1fd831d7f93702326453fdfca4e0704bb2278bce10c70bbdc2ae3f86d08e4f5e3c94b54f28b90d770a188826bc5bc1
-
SSDEEP
98304:X/nSkCph35dbHMifUFydjg3lPTcbhmhnG:XfSkohjbHMifUFUO0M
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource gzdoom.exe
Files
-
gzdoom.exe.exe windows x86
a08d378d156fd44d54820553153dfb06
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MulDiv
GetCommandLineA
SetConsoleMode
FlushConsoleInputBuffer
AllocConsole
ReadConsoleA
FindClose
OutputDebugStringA
FindFirstFileA
FindNextFileA
QueryPerformanceCounter
QueryPerformanceFrequency
GetLocaleInfoA
SetConsoleTextAttribute
GetACP
WideCharToMultiByte
VirtualProtect
HeapCreate
HeapReAlloc
HeapFree
TerminateProcess
GetExitCodeProcess
SetLastError
CreatePipe
PeekNamedPipe
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
CreateProcessA
SearchPathA
GetSystemDirectoryA
SetCurrentDirectoryA
LoadLibraryExA
SetEndOfFile
CreateFileW
GetCurrentDirectoryW
GetFullPathNameW
SetEnvironmentVariableA
WriteConsoleW
OutputDebugStringW
LCMapStringW
CompareStringW
DuplicateHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileAttributesExW
DeleteFileW
RemoveDirectoryW
SetStdHandle
GetDriveTypeW
FindNextFileW
FindFirstFileExW
CreateDirectoryW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
GetTimeZoneInformation
GetStartupInfoW
GetCPInfo
GetOEMCP
IsValidCodePage
GetFullPathNameA
GetFileType
FileTimeToLocalFileTime
HeapSize
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
RaiseException
IsProcessorFeaturePresent
IsDebuggerPresent
MultiByteToWideChar
AreFileApisANSI
GetModuleHandleExW
GetSystemTimeAsFileTime
RtlUnwind
DecodePointer
EncodePointer
GetStdHandle
GetFileInformationByHandle
QueueUserAPC
GetCurrentThread
SetUnhandledExceptionFilter
ExitProcess
SetPriorityClass
SleepEx
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExA
CreateFileA
GetTempFileNameA
GetTempPathA
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
SetFilePointer
ReadFile
WriteFile
GetFileSize
LocalFree
GetExitCodeThread
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetProcessHeap
HeapAlloc
VirtualQuery
GetProcAddress
FreeLibrary
SetThreadPriority
CreateEventA
CloseHandle
WaitForMultipleObjects
ResetEvent
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ExitThread
CreateThread
Sleep
WaitForSingleObject
FormatMessageA
GetLastError
GetStringTypeW
GetCurrentDirectoryA
user32
CreateWindowExA
DestroyWindow
ShowWindow
CallWindowProcA
SendMessageA
ClipCursor
DestroyCursor
SetClassLongA
GetAsyncKeyState
MapDialogRect
LoadImageA
LoadIconA
LoadCursorA
SetRect
FillRect
GetWindowTextLengthA
DrawIcon
MoveWindow
SetWindowPos
CreateDialogParamA
DialogBoxParamA
EndDialog
GetDlgItem
CheckDlgButton
IsDlgButtonChecked
SetFocus
SetTimer
KillTimer
EnableWindow
UpdateWindow
SetForegroundWindow
ScrollWindow
SetWindowTextA
GetWindowTextA
GetClientRect
GetWindowRect
MessageBoxA
MessageBeep
ClientToScreen
ScreenToClient
GetWindowLongA
SetWindowLongA
GetParent
SetScrollInfo
GetScrollInfo
AdjustWindowRectEx
GetDC
ReleaseDC
GetActiveWindow
GetFocus
EnumDisplaySettingsA
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
GetSystemMetrics
SendMessageW
CreateIconIndirect
SetDlgItemTextA
SendDlgItemMessageA
GetDesktopWindow
ChangeDisplaySettingsExA
GetMonitorInfoA
EnumDisplayMonitors
GetMessageA
GetClassLongA
GetCursorPos
SetCursorPos
GetForegroundWindow
IsDialogMessageA
SetCursor
InvalidateRect
ReleaseCapture
SetCapture
MapVirtualKeyA
GetKeyState
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
PostQuitMessage
TranslateMessage
GetUpdateRect
EndPaint
BeginPaint
UnregisterClassA
RegisterClassA
DefWindowProcA
gdi32
GetObjectA
SetMapMode
SetBkColor
SelectObject
GetMapMode
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
SelectPalette
DPtoLP
GetSystemPaletteEntries
GetStockObject
CreatePalette
SetPixelV
CreateDIBSection
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
GetDeviceGammaRamp
SetDeviceGammaRamp
SwapBuffers
CreateSolidBrush
CreateFontIndirectA
GetDeviceCaps
GetTextExtentPoint32A
SetBkMode
StretchDIBits
SetTextColor
SetTextAlign
GetTextMetricsA
TextOutA
RealizePalette
DeleteObject
Rectangle
shell32
ShellExecuteA
ole32
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
CoSetProxyBlanket
oleaut32
SysFreeString
SysAllocString
comdlg32
GetSaveFileNameA
advapi32
CryptReleaseContext
GetUserNameA
CryptGenRandom
RegCloseKey
CryptAcquireContextA
RegQueryValueExA
RegOpenKeyExA
wsock32
WSAGetLastError
WSACleanup
WSAStartup
gethostbyname
socket
sendto
recvfrom
ntohl
inet_addr
ioctlsocket
htons
inet_ntoa
closesocket
bind
winmm
midiOutReset
midiOutShortMsg
midiOutUnprepareHeader
midiOutPrepareHeader
midiOutSetVolume
midiOutGetVolume
midiStreamStop
midiStreamRestart
midiStreamOut
midiStreamProperty
midiStreamClose
midiStreamOpen
midiOutGetDevCapsA
midiOutGetNumDevs
timeEndPeriod
timeKillEvent
timeSetEvent
timeGetTime
timeBeginPeriod
timeGetDevCaps
mciSendCommandA
comctl32
ord17
opengl32
glGetIntegerv
wglDeleteContext
wglCreateContext
glGetString
wglGetProcAddress
wglMakeCurrent
Exports
Exports
Sections
.text Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rtext Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 443KB - Virtual size: 442KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ