AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
1d6b0dcef7a1bdc45964cb8558b5c634ccd08af8bd6f390ddfd6e330eac20a7d.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
1d6b0dcef7a1bdc45964cb8558b5c634ccd08af8bd6f390ddfd6e330eac20a7d.exe
Resource
win10v2004-20231020-en
Target
1d6b0dcef7a1bdc45964cb8558b5c634ccd08af8bd6f390ddfd6e330eac20a7d
Size
5.4MB
MD5
f9be4cb1f1f674b60c61ebd3b7e1fb62
SHA1
f6eca6b95ef7401490a092f1274d2082beba24b9
SHA256
1d6b0dcef7a1bdc45964cb8558b5c634ccd08af8bd6f390ddfd6e330eac20a7d
SHA512
9ce7c8d90d419695d0da7f4c1308c8b9b24d285d979e82fad4ddfc93aba809883d4130320d25aa9b0b5b852443c40526b43fe4c1a830c08aac161bcfb176aaa8
SSDEEP
98304:x9cC0kUknSS2ivGeABg0BhDHYOzLicT8QbZo0XFRATIXt6:MC1VeeszBhD4Oz2coco0Xrbt6
Checks for missing Authenticode signature.
resource |
---|
1d6b0dcef7a1bdc45964cb8558b5c634ccd08af8bd6f390ddfd6e330eac20a7d |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
timeGetTime
timeEndPeriod
timeBeginPeriod
SwapBuffers
ChoosePixelFormat
CreateBitmap
DeleteObject
SetPixelFormat
LoadImageW
IsIconic
SetCursorPos
GetCursorPos
SetForegroundWindow
GetDC
ReleaseDC
wsprintfW
GetWindowRect
DefWindowProcW
ReleaseCapture
GetDesktopWindow
IsClipboardFormatAvailable
GetClientRect
SetCursor
SetClipboardData
SetCapture
LoadCursorW
ChangeWindowMessageFilterEx
GetClipboardData
TranslateMessage
PeekMessageW
EmptyClipboard
CloseClipboard
CreateIconIndirect
DispatchMessageW
OpenClipboard
ShowWindow
DestroyCursor
RegisterClassExW
GetKeyboardLayout
GetWindowLongW
GetWindowLongPtrW
GetKeyState
PostMessageW
MapVirtualKeyW
DestroyWindow
IsWindowVisible
SetWindowPos
SetClipboardViewer
MessageBoxW
SetWindowLongPtrW
CreateWindowExW
ScreenToClient
SendMessageW
GetCursor
GetSystemMetrics
ShowCursor
htons
htonl
ntohs
ntohl
WSAGetLastError
setsockopt
ioctlsocket
WSARecvFrom
socket
WSACleanup
__WSAFDIsSet
bind
closesocket
gethostbyname
select
WSASendTo
WSAStartup
inet_addr
getsockname
CommandLineToArgvW
SHGetFolderPathW
DragFinish
DragQueryPoint
DragQueryFileW
glViewport
glDepthRange
glStencilOp
glClear
glGetIntegerv
glDisable
glPolygonOffset
glStencilMask
glPolygonMode
glBindTexture
glGenTextures
glEnable
glCullFace
glDepthMask
glGetString
glTexParameterfv
glFrontFace
wglGetProcAddress
glStencilFunc
glReadPixels
wglCreateContext
glColorMask
glTexParameteri
glDeleteTextures
glReadBuffer
glClearColor
glDrawArrays
glClearStencil
glGetError
wglDeleteContext
glTexSubImage2D
glDepthFunc
glPixelStorei
wglMakeCurrent
glDrawBuffer
glClearDepth
glDrawElements
glGetTexParameteriv
glGetTexImage
wglGetCurrentDC
glTexImage2D
glTexParameterf
alBufferData
alDeleteBuffers
alDeleteSources
alDistanceModel
alDopplerFactor
alGenBuffers
alGenSources
alGetError
alGetSourcef
alGetSourcei
alGetString
alIsBuffer
alIsSource
alListener3f
alListenerf
alListenerfv
alSource3f
alSourcePause
alSourcePlay
alSourceQueueBuffers
alSourceStop
alSourceUnqueueBuffers
alSourcef
alSourcefv
alSourcei
alSpeedOfSound
alcCloseDevice
alcCreateContext
alcDestroyContext
alcGetIntegerv
alcGetProcAddress
alcGetString
alcIsExtensionPresent
alcMakeContextCurrent
alcOpenDevice
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
??Bid@locale@std@@QEAA_KXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?good@ios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xlength_error@std@@YAXPEBD@Z
CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoInitializeEx
SysAllocString
VariantClear
SysFreeString
WinHttpReceiveResponse
WinHttpOpen
WinHttpReadData
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSendRequest
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpQueryHeaders
SteamAPI_RegisterCallResult
SteamAPI_Shutdown
SteamInternal_ContextInit
SteamAPI_UnregisterCallback
SteamInternal_SteamAPI_Init
SteamAPI_RegisterCallback
SteamAPI_RestartAppIfNecessary
SteamAPI_UnregisterCallResult
SteamAPI_RunCallbacks
SteamInternal_FindOrCreateUserInterface
SteamAPI_GetHSteamUser
ImmDisableIME
ImmIsIME
lstrcpyW
GetCurrentProcessId
lstrlenW
GlobalUnlock
GetConsoleWindow
GetModuleHandleW
GlobalLock
GlobalAlloc
QueryPerformanceCounter
QueryPerformanceFrequency
OpenThread
DeleteCriticalSection
SwitchToThread
CreateThread
TerminateThread
GetCurrentThread
Sleep
GetCurrentThreadId
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetThreadPriority
WakeConditionVariable
LocalFree
GetProcessAffinityMask
EnterCriticalSection
SleepConditionVariableCS
GetTempPathW
SetUnhandledExceptionFilter
RtlDeleteFunctionTable
LoadLibraryA
GetSystemDirectoryA
GetFinalPathNameByHandleW
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryW
GlobalMemoryStatusEx
MultiByteToWideChar
CloseHandle
CreateFileW
FindClose
GetCurrentProcess
FindNextFileW
FindFirstFileW
CreateDirectoryW
GetCurrentDirectoryW
GetLastError
FormatMessageA
GetLocaleInfoEx
FlushFileBuffers
FindFirstFileExW
GetFileAttributesExW
WakeAllConditionVariable
ReleaseSRWLockExclusive
TerminateProcess
InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
AreFileApisANSI
RtlAddFunctionTable
GetFileInformationByHandleEx
WideCharToMultiByte
AcquireSRWLockExclusive
__CxxFrameHandler4
__intrinsic_setjmp
memset
_CxxThrowException
__current_exception_context
__current_exception
strrchr
strchr
longjmp
__C_specific_handler
wcsstr
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
memchr
memcmp
memcpy
memmove
__setusermatherr
ldexp
sinf
round
roundf
pow
logf
fmodf
fmod
cosf
atan2f
tanf
powf
_fdopen
modff
atan
remainderf
asinf
acosf
_invalid_parameter_noinfo_noreturn
_exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
terminate
strerror
_errno
exit
_c_exit
_stricmp
strcmp
_strnicmp
strncpy
_strlwr
strncmp
towlower
isspace
towupper
isalnum
wcsncmp
isdigit
fsetpos
__stdio_common_vfprintf
_open
fgets
__acrt_iob_func
fputs
ungetc
__stdio_common_vsscanf
_fseeki64
setvbuf
__stdio_common_vswprintf_s
fgetpos
fwrite
fread
fgetc
__stdio_common_vswprintf
_read
_dup
_getcwd
ftell
_lseek
fseek
__stdio_common_vsprintf
_fileno
_close
_wfopen
fclose
feof
_get_stream_buffer_pointers
__stdio_common_vswscanf
_chsize
_ftelli64
_wfopen_s
_set_fmode
fopen
fflush
fputc
__p__commode
_configthreadlocale
___lc_codepage_func
_wsetlocale
strtol
atof
atoi
_strtoui64
wcstombs
strtoull
strtoul
atoll
strtod
mbstowcs_s
_wrmdir
_wremove
_wstat64
_stat64i32
_lock_file
_wstat64i32
_unlock_file
_waccess
_time64
_utime64
_wutime64
_mktime64
_localtime64_s
_ftime64
_localtime64
wcsftime
_set_new_mode
malloc
realloc
_callnewh
free
qsort
C2VectParallel
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ