C:\dvs\p4\build\sw\rel\gpu_drv\installer_core\installer_core_vs2017\Build\Core\Out\Win32\Release\setup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e3218a1a8c32cabb29bf8ad84bd260c736daa848670ffcd18e9964bf30e7f934.exe
Resource
win7-20240221-en
General
-
Target
e3218a1a8c32cabb29bf8ad84bd260c736daa848670ffcd18e9964bf30e7f934
-
Size
1.2MB
-
MD5
41aff75cc8b2618f70fdbace35a40151
-
SHA1
188a835ae246dc5e6cd28dd4c8341b3555a4140a
-
SHA256
e3218a1a8c32cabb29bf8ad84bd260c736daa848670ffcd18e9964bf30e7f934
-
SHA512
e6ab7f58820e316aef36de19d2aa0831e1104ff9591a9c1db342eab06b9ca3d1fefbdcbd64a3b4bd1a36806389609d07c8a29265a06cc6ed27ad7c1876c852f9
-
SSDEEP
24576:o0qmde3wccSqq/j4Z7BYCLVarYGYmB1b/EQLnCd2bn:o0iZqsEnYCLVaCmXb/EQGd2T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3218a1a8c32cabb29bf8ad84bd260c736daa848670ffcd18e9964bf30e7f934
Files
-
e3218a1a8c32cabb29bf8ad84bd260c736daa848670ffcd18e9964bf30e7f934.exe windows:6 windows x86 arch:x86
dd2655d36468bc13ed014e028c963a93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateEventW
CloseHandle
RaiseException
DecodePointer
SetLastError
DebugBreak
Sleep
IsDebuggerPresent
EnterCriticalSection
GetCurrentProcess
LeaveCriticalSection
GetVersionExW
LocalFree
FormatMessageW
InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
WideCharToMultiByte
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
FindResourceExW
FindResourceW
LoadResource
LockResource
SetErrorMode
SizeofResource
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
LoadLibraryW
FileTimeToSystemTime
MultiByteToWideChar
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindNextFileW
GetFileAttributesW
GetTempPathW
GetCurrentThread
GetTickCount
GetSystemDirectoryW
lstrcmpW
DuplicateHandle
TerminateProcess
ExpandEnvironmentStringsW
LocalAlloc
VerSetConditionMask
CompareFileTime
GetFullPathNameW
OutputDebugStringW
GetModuleHandleA
GetModuleHandleW
LoadLibraryExW
lstrcmpA
VerifyVersionInfoW
GetSystemInfo
TryEnterCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
EncodePointer
GetThreadTimes
FreeLibraryAndExitThread
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
RtlUnwind
ExitProcess
GetStdHandle
WriteFile
GetACP
GetFileType
LCMapStringW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
user32
MessageBoxW
advapi32
OpenProcessToken
GetTokenInformation
RegOpenCurrentUser
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
LsaNtStatusToWinError
ole32
CoUninitialize
CoInitializeSecurity
CoInitializeEx
oleaut32
SafeArrayGetVartype
SafeArrayCopy
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnlock
SafeArrayCreate
VariantClear
VariantInit
SafeArrayDestroy
SysStringLen
VariantChangeType
SysAllocStringLen
SysAllocString
SysFreeString
Sections
.text Size: 346KB - Virtual size: 346KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 588KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE