C:\Users\Fortn\Desktop\v4 free\v4 fix\x64\Release\GeforceNOW.pdb
Static task
static1
1 signatures
General
-
Target
v1.exe
-
Size
468KB
-
MD5
606cb4a9f0ecb725b54a2b671d8ec300
-
SHA1
6d5df03bc4b7c6cb4ba5f4f723748f099ee78ae2
-
SHA256
737c2646d3f1aaf1410777dac2939845bc19a62f1c0a326df08ce06463e17257
-
SHA512
423af9104b8c97a34d2868c9399fd4cc1cf14dc7881d068ca8a41921790cd903aa7133529b5f945f1516b37c518f711d7c009857ae11d3325bbd1190afe0f760
-
SSDEEP
6144:SZqOX2qYA5tRzELn3qLlE7TOp+4vwnDIMxOZVXC8b21k+6wWEa5oJ6JnHB4DU8Qh:SZ7FELnuxIfK61ks6JnH71sUN9
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource v1.exe
Files
-
v1.exe.exe windows:6 windows x64 arch:x64
bd8e5e7dde7ff1422c9ea77f1481bab0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
d3d9
Direct3DCreate9Ex
urlmon
URLDownloadToFileA
kernel32
GetProcAddress
FreeLibrary
QueryPerformanceCounter
Process32First
VirtualProtect
GetConsoleScreenBufferInfo
VirtualFree
SetConsoleTitleA
GetCurrentProcess
SetConsoleScreenBufferSize
GetStdHandle
DeviceIoControl
VirtualAlloc
TerminateProcess
SetConsoleWindowInfo
CreateFileW
CreateToolhelp32Snapshot
Sleep
QueryPerformanceFrequency
Process32Next
CloseHandle
Beep
GetConsoleWindow
lstrcmpiA
GetTickCount
LoadLibraryA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetModuleHandleA
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
MultiByteToWideChar
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
user32
SetCursorPos
OpenClipboard
DispatchMessageA
GetWindowRect
DestroyWindow
GetSystemMetrics
ShowWindow
SetWindowLongA
MessageBoxA
TranslateMessage
PeekMessageA
GetDesktopWindow
FindWindowA
SetForegroundWindow
SendInput
GetAsyncKeyState
GetKeyState
LoadCursorA
ScreenToClient
ClientToScreen
GetCursorPos
GetClientRect
SetCursor
EmptyClipboard
GetForegroundWindow
SetClipboardData
GetClipboardData
CloseClipboard
shell32
Shell_NotifyIconA
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
msvcp140
?good@ios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Xlength_error@std@@YAXPEBD@Z
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Cnd_do_broadcast_at_thread_exit
_Query_perf_counter
_Thrd_detach
_Mtx_unlock
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
ntdll
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
xinput1_4
ord2
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
memmove
memcmp
__std_terminate
strstr
__std_exception_destroy
__std_exception_copy
__C_specific_handler
__current_exception
__current_exception_context
_CxxThrowException
memset
memchr
api-ms-win-crt-stdio-l1-1-0
__p__commode
fflush
fseek
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
fclose
fwrite
__acrt_iob_func
_wfopen
__stdio_common_vsprintf
fread
__stdio_common_vsscanf
__stdio_common_vsprintf_s
_set_fmode
ftell
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-string-l1-1-0
strncmp
strcmp
strncpy
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
malloc
free
api-ms-win-crt-convert-l1-1-0
atof
api-ms-win-crt-runtime-l1-1-0
_beginthreadex
_invalid_parameter_noinfo_noreturn
terminate
system
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_register_thread_local_exe_atexit_callback
_get_initial_narrow_environment
_initterm
_initterm_e
_exit
_c_exit
__p___argc
__p___argv
exit
api-ms-win-crt-filesystem-l1-1-0
remove
api-ms-win-crt-math-l1-1-0
atan2
atan2f
ceilf
cosf
sinf
sqrt
asin
_dclass
powf
pow
acosf
tanf
sqrtf
__setusermatherr
fmodf
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ