Static task
static1
General
-
Target
igfxTray.exe
-
Size
391KB
-
MD5
991234346fd5a673bec60534a245714d
-
SHA1
550d700fac4897f1e653a4485b70647104b4eeba
-
SHA256
d0caaacef46cfbc4ca8ea44f5192f1dbad51b98c4c94e1587c00eff00f263d57
-
SHA512
613e87c64b72fe9ea9fd7474d842486dbdc5b66d921a92f91b81183b5580b768f7eed44b6dc434ed900e0963d9f427ef7e977af84acad77ae06edc1d6e3526ed
-
SSDEEP
6144:5f08/276nlwcTVpFqu7o+aDl7BeEp5jfSAuODvtMJfDVChJW9:d276lwKLQBeOx9uMvt6fDVCC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource igfxTray.exe
Files
-
igfxTray.exe.exe windows:6 windows x64 arch:x64
7b8196e17094b941ffff7cb1c6e4ffc8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetCurrentProcess
CreateThread
GetCurrentThreadId
FlushInstructionCache
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
lstrcmpiW
MultiByteToWideChar
IsDebuggerPresent
OutputDebugStringW
HeapAlloc
HeapFree
GetProcessHeap
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
VirtualAlloc
VirtualFree
Sleep
CreateEventW
CreateMutexW
WaitForSingleObject
SetEvent
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetStringTypeW
DeleteCriticalSection
LCMapStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
HeapSize
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetStartupInfoW
GetFileType
GetStdHandle
GetModuleHandleExW
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
RaiseException
CloseHandle
DecodePointer
GetCommandLineW
ExitProcess
IsProcessorFeaturePresent
EncodePointer
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
LocalFree
WideCharToMultiByte
lstrlenA
user32
PostMessageW
CreatePopupMenu
DestroyMenu
GetMenuItemCount
InsertMenuW
AppendMenuW
SetForegroundWindow
MessageBoxW
FindWindowW
GetMessageW
LoadImageW
LoadIconW
FindWindowExW
GetWindowLongPtrW
GetCursorPos
GetWindowRect
GetClientRect
SetWindowTextW
EndPaint
BeginPaint
SetMenuDefaultItem
TrackPopupMenuEx
GetSubMenu
GetSystemMetrics
KillTimer
SetTimer
GetDlgItem
CreateDialogParamW
IsWindowVisible
ShowWindow
DestroyWindow
CallWindowProcW
PostQuitMessage
DefWindowProcW
SendMessageW
RegisterWindowMessageW
LoadCursorW
GetDesktopWindow
SetWindowLongPtrW
CharNextW
CharUpperW
CreateWindowExW
GetClassInfoExW
RegisterClassExW
UnregisterClassW
PostThreadMessageW
DispatchMessageW
TranslateMessage
advapi32
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
ole32
CoCreateInstance
CoUninitialize
CoRegisterClassObject
CoRevokeClassObject
CoResumeClassObjects
CoAddRefServerProcess
CoReleaseServerProcess
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
OleRun
shell32
Shell_NotifyIconW
oleaut32
GetErrorInfo
VariantClear
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayGetVartype
VarBstrCat
VarBstrCmp
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
gdi32
BitBlt
SelectObject
DeleteDC
CreateCompatibleDC
DeleteObject
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ