Static task
static1
Behavioral task
behavioral1
Sample
NvStTest.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NvStTest.exe
Resource
win10v2004-20230915-en
General
-
Target
NvStTest.exe
-
Size
2.6MB
-
MD5
59d5094b3adca90848e2533a76c1f7ba
-
SHA1
d5ca6c815339244eee3e70ca3c223e4850e979e2
-
SHA256
552f9c111bdf18479b2195933649b8dbf80d65113b6d8743ecc9562a4e065a77
-
SHA512
c5113b64e2d5bb63e2d3e5f645d11f67e1f9865b4c5751b1aacd79c621a4341528cc6e184fe2724d54f3188242a1d626be667830eed275b35a35362daddc263c
-
SSDEEP
49152:6BsL1YVVe22LWcGccgRgYr+Z0SY0SxmlrDoBls2RHZXOXB32Zf9YpYy8HOXZ8d1K:ws6VVe22xGccgRgYd2YI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NvStTest.exe
Files
-
NvStTest.exe.exe windows x86
dd3e5d2d1eb0abaeb044eaa08de7cb9e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
d3d8
Direct3DCreate8
winmm
timeGetTime
comctl32
PropertySheetA
InitCommonControlsEx
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
QueryPerformanceFrequency
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedExchangeAdd
LocalFree
GetModuleHandleW
LoadLibraryExW
CreateProcessW
LocalAlloc
CreateProcessA
GetSystemDirectoryW
GetFileAttributesW
CreateFileW
lstrcmpW
ExpandEnvironmentStringsW
GetFullPathNameW
VerifyVersionInfoW
VerSetConditionMask
CompareFileTime
FileTimeToSystemTime
OutputDebugStringW
lstrlenA
FindClose
FindNextFileA
FindFirstFileA
SizeofResource
FlushFileBuffers
SetStdHandle
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFullPathNameA
SetFilePointer
ReadFile
GetTimeZoneInformation
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
InitializeCriticalSectionAndSpinCount
InterlockedExchange
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleCP
HeapReAlloc
VirtualAlloc
FatalAppExitA
VirtualFree
HeapDestroy
HeapCreate
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentThread
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetDriveTypeA
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
RtlUnwind
WriteConsoleW
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
CloseHandle
FreeLibrary
lstrcpyA
lstrcatA
MulDiv
VirtualQuery
VirtualProtect
IsBadReadPtr
lstrcmpA
lstrcpynA
GetLocaleInfoA
SetLastError
FindResourceA
LoadResource
LockResource
IsProcessorFeaturePresent
OutputDebugStringA
Sleep
GetLastError
MultiByteToWideChar
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryA
ExpandEnvironmentStringsA
GetSystemDirectoryA
GetFileAttributesA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
GetVersionExA
GetFileSize
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
FindResourceW
WriteConsoleA
GetConsoleOutputCP
GetTickCount
user32
GetIconInfo
GetDC
ReleaseDC
EnumDisplayDevicesA
GetDesktopWindow
GetMessageA
MoveWindow
DialogBoxParamA
EnumWindows
EndDialog
wsprintfA
GetForegroundWindow
GetActiveWindow
RedrawWindow
ShowCursor
SetCursorPos
ScreenToClient
ClientToScreen
IsWindow
SetWindowTextA
CallWindowProcA
GetWindow
GetDlgItemTextA
SetDlgItemTextA
CreateDialogIndirectParamA
LoadStringA
EnableWindow
GetClassInfoA
GetClassLongA
SetClassLongA
CheckRadioButton
LoadAcceleratorsA
LoadIconA
RegisterClassA
EnumDisplaySettingsA
SetRect
AdjustWindowRect
LoadMenuA
GetSubMenu
TrackPopupMenuEx
GetMenu
DestroyMenu
DestroyWindow
PostQuitMessage
EnumChildWindows
GetAsyncKeyState
SetFocus
SetCursor
LoadCursorA
SetWindowRgn
PostMessageA
DefWindowProcA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetFocus
PeekMessageA
UnregisterPowerSettingNotification
RegisterPowerSettingNotification
IsWindowVisible
GetWindowRgn
PtInRect
SetForegroundWindow
mouse_event
OpenClipboard
RegisterClipboardFormatA
SetClipboardData
CloseClipboard
MessageBoxA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindowRect
ReleaseCapture
GetCursorPos
GetKeyState
ShowWindow
GetDlgItem
GetCapture
SetCapture
CreateWindowExA
SetWindowLongA
IsWindowEnabled
GetClientRect
GetParent
GetClassNameA
SendMessageA
GetWindowTextA
GetWindowLongA
DrawTextA
DrawTextW
SetWindowPos
gdi32
DeleteDC
CreateFontA
GetStockObject
CreateRectRgnIndirect
CombineRgn
CreateRectRgn
PtInRegion
DeleteObject
GetClipBox
GetDCOrgEx
GetDeviceCaps
CreateCompatibleDC
SetBkColor
SetTextColor
SetMapMode
CreateDIBSection
GetDIBits
GetObjectA
GetCharWidthA
GetPath
EndPath
TextOutA
BeginPath
SetBkMode
GetTextExtentPoint32A
SetTextAlign
GetTextMetricsA
SelectObject
CreatePolygonRgn
ExtEscape
ExtTextOutA
CreateFontIndirectA
CreateDCA
advapi32
RegSetValueExA
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteValueA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
OleGetClipboard
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ