NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
HARDCODED_demo.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
HARDCODED_demo.exe
Resource
win10-20230915-en
Behavioral task
behavioral3
Sample
HARDCODED_demo.exe
Resource
win10v2004-20230915-en
General
-
Target
HARDCODED_demo.exe
-
Size
156.2MB
-
MD5
97381127dca878a2a64ef862947182ff
-
SHA1
e34b91e7abad5d48709210fdf74d71761ad4cb82
-
SHA256
1939ad43b7ce0391450112aa0837f72ac2be10294fb9c23e84ad03e25f95c1b5
-
SHA512
bd78a159e34e76ea6233fa8427f6dfab548f9a8d3bac706c96d283733f6bc1208ea1ed8bfe9c1ab32f0ee4640ef9255053cc8a561a3ef50bf12c5af0d4200cf2
-
SSDEEP
3145728:pNFVRwyXMa0/YE3KIbKxfjgRSY43WCMsL2rr2VRM9rmmOnYBdbjbXZ1PPc:pNbR18a0/YVIIfLMsmr2zMBmmfdbHXPE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HARDCODED_demo.exe
Files
-
HARDCODED_demo.exe.exe windows x86
98bda56a19818a330f24b464d800f1e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
opengl32
wglCreateContext
wglMakeCurrent
wglGetCurrentDC
glViewport
glTexSubImage2D
glTexParameteri
glTexParameterf
glTexImage2D
glScissor
glReadPixels
glReadBuffer
glPolygonMode
glPixelStorei
glLineWidth
glGetString
glGetIntegerv
glGetFloatv
wglDeleteContext
glFrontFace
glFlush
glEnable
glDrawElements
glDrawBuffer
glDrawArrays
glDisable
glDepthMask
glDepthFunc
glDeleteTextures
glCullFace
glCopyTexSubImage2D
glColorMask
glClearDepth
glClearColor
glClear
glBlendFunc
glBindTexture
glGenTextures
wglGetProcAddress
kernel32
GlobalLock
SystemTimeToFileTime
GetTimeZoneInformation
MultiByteToWideChar
GetUserDefaultUILanguage
GlobalUnlock
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
LoadLibraryA
EncodePointer
GetProcAddress
LoadLibraryW
GetModuleHandleA
SetEndOfFile
WriteConsoleW
HeapSize
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleInputW
SetConsoleMode
GetFullPathNameW
GetFileSizeEx
HeapReAlloc
SetFilePointerEx
ReadConsoleW
GetConsoleMode
FlushFileBuffers
CreatePipe
GetFileAttributesExW
GetExitCodeProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
MoveFileExW
DeleteFileW
RemoveDirectoryW
GetConsoleCP
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
CreateFileW
SetConsoleCtrlHandler
GetModuleHandleExW
ReadFile
GetModuleFileNameW
FreeLibrary
GetLocalTime
GetSystemTime
CreateProcessW
TerminateProcess
Sleep
WaitForSingleObject
QueryPerformanceFrequency
QueryPerformanceCounter
SetLastError
GetLastError
GetEnvironmentVariableW
GetStdHandle
WideCharToMultiByte
SetStdHandle
SetEnvironmentVariableW
DuplicateHandle
LoadLibraryExW
RaiseException
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
LocalFree
GlobalAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
ExitProcess
SetThreadPriority
ResetEvent
SetEvent
CreateEventA
CreateThread
CreateSemaphoreA
WaitForSingleObjectEx
ReleaseSemaphore
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ReplaceFileW
GetLogicalDrives
GetFileAttributesW
GetDiskFreeSpaceExA
FindNextFileW
FindFirstFileExW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
FlushConsoleInputBuffer
GlobalMemoryStatus
GetTickCount
GetCurrentProcessId
CloseHandle
FindClose
GetCurrentThreadId
WriteFile
GetCommandLineW
GetFileType
DecodePointer
user32
GetDC
GetClientRect
SetWindowPos
MessageBoxA
GetKeyboardLayoutNameA
TrackMouseEvent
GetDesktopWindow
GetUserObjectInformationW
GetProcessWindowStation
TranslateMessage
DispatchMessageW
PeekMessageW
SendMessageA
DefWindowProcW
CallWindowProcW
RegisterClassExW
CreateWindowExW
ShowWindow
FlashWindowEx
OpenClipboard
GetRawInputDeviceList
GetRawInputDeviceInfoA
EnumDisplayMonitors
MonitorFromWindow
EnumDisplaySettingsA
CreateIconIndirect
CreateIconFromResource
LoadIconA
LoadCursorA
SetWindowLongA
GetWindowLongA
ClipCursor
ScreenToClient
ClientToScreen
SetCursor
SetCursorPos
MessageBoxW
AdjustWindowRectEx
GetWindowRect
CloseClipboard
SetWindowTextW
ReleaseDC
AllowSetForegroundWindow
SetForegroundWindow
GetSystemMetrics
KillTimer
SetTimer
ReleaseCapture
SetCapture
SetFocus
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
MoveWindow
gdi32
SetTextColor
GetObjectA
SelectObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
SwapBuffers
SetPixelFormat
ChoosePixelFormat
SetBkColor
wsock32
htons
listen
ntohs
select
setsockopt
closesocket
send
bind
accept
socket
WSAStartup
WSACleanup
recvfrom
sendto
WSAGetLastError
connect
recv
shutdown
WSASetLastError
inet_ntoa
__WSAFDIsSet
shell32
DragAcceptFiles
DragQueryFileW
SHGetFolderPathW
SHFileOperationA
ShellExecuteW
CommandLineToArgvW
dinput8
DirectInput8Create
dsound
ord1
ord7
ord2
ord6
ole32
CoInitialize
CoCreateInstance
CoUninitialize
iphlpapi
GetAdaptersAddresses
shlwapi
PathFileExistsW
ws2_32
getaddrinfo
freeaddrinfo
advapi32
ReportEventA
RegisterEventSourceA
DeregisterEventSource
Exports
Exports
Sections
.text Size: 11.3MB - Virtual size: 11.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 279KB - Virtual size: 359KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 495KB - Virtual size: 495KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ