1da8e7c92c86fc8dbab5287bdca91ca1

Sharing

Copy URL Twitter E-mail

General

Target

1da8e7c92c86fc8dbab5287bdca91ca1
Size

21.0MB
MD5

1da8e7c92c86fc8dbab5287bdca91ca1
SHA1

151187b840c9daf509d5c59734d4ba843fdb8f4e
SHA256

e72b656b15dca5b2dde4784bb113ca7c9768eeb731264fe10d057fc7909ef9c4
SHA512

c475448ea3d653c10d8d3fbe0c8a2b665e038c6f36bb7ce8d668d42b9df919414d6b9093da7080e7828c1ef45856662daaef62d57554e104d83b2f6fb82ea73f
SSDEEP

196608:v1vJbdcTTqxfohcTT7cTT7tEyoleUtsTg3TKS42G:9v5/zoUtmgjKD2G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1da8e7c92c86fc8dbab5287bdca91ca1

Files

1da8e7c92c86fc8dbab5287bdca91ca1
.dll windows:6 windows x64 arch:x64

157881c2d444d5d942e1fa2309890058

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

nvcuda

cuCtxDestroy_v2
cuModuleUnload
cuGetErrorString
cuDeviceGet
cuCtxCreate_v2
cuCtxSynchronize
cuModuleLoadDataEx
cuModuleGetFunction
cuLaunchKernel_ptsz
cuInit

nvrtc64_102_0

nvrtcGetErrorString
nvrtcDestroyProgram
nvrtcCompileProgram
nvrtcGetPTXSize
nvrtcGetPTX
nvrtcGetProgramLogSize
nvrtcGetProgramLog
nvrtcAddNameExpression
nvrtcGetLoweredName
nvrtcCreateProgram

kernel32

GetSystemDirectoryW
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
GetVersionExW
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
CreateTimerQueue
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
SwitchToThread
CreateWaitableTimerA
FreeLibrary
GetProcAddress
GetLastError
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
VirtualAlloc
VirtualFree
VirtualProtect
FreeLibraryAndExitThread
GetModuleHandleA
GetProcessAffinityMask
SetThreadAffinityMask
VerSetConditionMask
CreateFileW
GetFileAttributesW
GetFullPathNameW
SetLastError
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
LocalAlloc
LocalFree
VerifyVersionInfoW
WriteConsoleW
HeapSize
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
DuplicateHandle
MultiByteToWideChar
EncodePointer
DecodePointer
GetTickCount
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
ExitProcess
GetModuleHandleExW
SetStdHandle
GetFileType
CreateThread
ExitThread
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetFileSizeEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap

Exports

Exports

NvOptimusEnablementCuda
alloc
astroBWTHash
astroBWTPrepare
cnHash
deviceCount
deviceInfo
deviceInfo_v2
deviceInit
deviceInt
deviceName
deviceUint
deviceUlong
init
kawPowHash
kawPowPrepare
kawPowPrepare_v2
kawPowStopHash
lastError
pluginVersion
release
rxHash
rxPrepare
setJob
setJob_v2
version

Sections

.text
Size: 545KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nv_fatb
Size: 20.2MB - Virtual size: 20.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nvFatBi
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

157881c2d444d5d942e1fa2309890058

Headers

DLL Characteristics

File Characteristics

Imports

nvcuda

nvrtc64_102_0

kernel32

Exports

Exports

Sections

.text Size: 545KB - Virtual size: 544KB

.rdata Size: 263KB - Virtual size: 262KB

.data Size: 11KB - Virtual size: 82KB

.pdata Size: 26KB - Virtual size: 25KB

.nv_fatb Size: 20.2MB - Virtual size: 20.2MB

.nvFatBi Size: 512B - Virtual size: 240B

.rsrc Size: 22KB - Virtual size: 22KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 545KB - Virtual size: 544KB

.rdata
Size: 263KB - Virtual size: 262KB

.data
Size: 11KB - Virtual size: 82KB

.pdata
Size: 26KB - Virtual size: 25KB

.nv_fatb
Size: 20.2MB - Virtual size: 20.2MB

.nvFatBi
Size: 512B - Virtual size: 240B

.rsrc
Size: 22KB - Virtual size: 22KB

.reloc
Size: 6KB - Virtual size: 5KB