nvidiaInspector[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nvidiaInspector.exe
Size

518KB
MD5

158e44a0504c8afd5ced5ee8b1445106
SHA1

36d87ab3ee284edb873589901897b5f34f1ae638
SHA256

461e439d9b951d3adbc9fdfe06cbee24a11032615bfac99d00ffafae326c227e
SHA512

b9202e91ab1c874bf3fdd16b9fbde8187587238a82474f5e64c4edb546e35b74d9e00b98f88659bcfc722fb807e3824294d806a42ce4adf85b53b253496623ac
SSDEEP

6144:KAxfefPKnRsCJcOV81IlpBtYMOe0Q8/kkCsHBDKZnAXOEhBer:KAAffCO5IlpwM63hWlAX7hBe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nvidiaInspector.exe

Files

nvidiaInspector.exe
.exe windows:4 windows x86 arch:x86

Password: cdvysx

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Orbmu2k\Documents\Visual Studio 2010\Projects\GPUStatusReader\nvapiDirect\obj\Release\nvidiaInspector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ