NvidiaEnable
Static task
static1
Behavioral task
behavioral1
Sample
8f02db051024b4431c0bd5beb7d666a9f717e3a6386f24a11857ca5b92ce617c.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
8f02db051024b4431c0bd5beb7d666a9f717e3a6386f24a11857ca5b92ce617c.dll
Resource
win10v2004-20231020-en
General
-
Target
8f02db051024b4431c0bd5beb7d666a9f717e3a6386f24a11857ca5b92ce617c
-
Size
216KB
-
MD5
d2fd12b6af179ae7c4ad6a090f7d5c25
-
SHA1
516f3edd3c00776f4c325decb6ddf29a6f1d2fd3
-
SHA256
8f02db051024b4431c0bd5beb7d666a9f717e3a6386f24a11857ca5b92ce617c
-
SHA512
d59136a39cbe504d9f30b8f52cef83121953dfefc17ae0e79f9d39872362cb3004229f0dc9d050a044787c2ddc7929722a74413e29ed4780871c88c50317712a
-
SSDEEP
3072:kK8DwCtyxm16c2mvM7XpQoyq8f2Rc5XLYf+qdddkg7BiOxjbHoc:kK8DwFm16QgqJEfCGdc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8f02db051024b4431c0bd5beb7d666a9f717e3a6386f24a11857ca5b92ce617c
Files
-
8f02db051024b4431c0bd5beb7d666a9f717e3a6386f24a11857ca5b92ce617c.dll windows:6 windows x86
5cfe1e116ec692e740c7d0c2a8ff06e7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileMappingW
MapViewOfFile
GetProcAddress
GetModuleHandleW
GetCurrentProcess
GetModuleHandleA
K32GetModuleInformation
CloseHandle
FreeLibrary
GetTickCount
Sleep
QueueUserAPC
GetCurrentThread
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
vcruntime140
memset
__std_type_info_destroy_list
_except_handler4_common
memcpy
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-runtime-l1-1-0
_cexit
_initterm
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_seh_filter_dll
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ