DESCRIPTION
NAME
Static task
static1
Behavioral task
behavioral1
Sample
NVE.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
NVE.dll
Resource
win10v2004-20231215-en
Target
NVE.asi
Size
1.7MB
MD5
a92c3ceb5d0ae9e31f3b41e270843426
SHA1
c58b2650ecd718ee3d837e13f5b1f42be572e466
SHA256
2dd603de5ddf7e526a434a3930942c0098bd5d67c950efc7af2c7c1af08c2370
SHA512
4fa18eef2cb9b5b3b40c4a932cdb924c980dd193906ec18e371bbd76ce15587998440035ae6aa51c9dc9c95dd37120f86aed41a9150ed3c3e5f70f13bdf1bdac
SSDEEP
24576:pDUOXyVA6rNNBsryx3ZHzIG6IfmChYWLjF3WH9MXh0lhSMXlKZmHHgzbA:COCWsxwSEIRqW/F3A14mHHg
Checks for missing Authenticode signature.
resource |
---|
NVE.asi |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
VerQueryValueW
GetFileVersionInfoA
GetFileVersionInfoSizeA
Sleep
GetModuleHandleW
ExitProcess
DisableThreadLibraryCalls
CreateThread
GetProcAddress
GetCurrentProcess
K32EnumProcessModules
VirtualProtect
GetModuleHandleA
GetModuleFileNameW
GlobalMemoryStatusEx
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualAllocEx
GetModuleFileNameA
RaiseException
GetLastError
FreeLibrary
LoadLibraryExA
SetEndOfFile
HeapCreate
HeapFree
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
GetCurrentProcessId
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WideCharToMultiByte
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
FormatMessageA
LocalFree
GetLocaleInfoEx
SetLastError
LoadLibraryExW
RtlUnwind
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetSystemTimeAsFileTime
LCMapStringEx
GetStringTypeW
GetCPInfo
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
ReadFile
GetStdHandle
GetFileType
GetFileSizeEx
ReadConsoleW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
HeapSize
WriteConsoleW
MessageBoxA
DESCRIPTION
NAME
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ