c:\dvs\p4\build\sw\rel\gpu_drv\r387\r388_10\drivers\stereo_vision\Setup\nvStInst\Release\bin\nvStInst.pdb
Static task
static1
Behavioral task
behavioral1
Sample
79e21ff9142821b2e3d6e3dc8d812e86da231dbbd1217415b4add748a4c1ce3c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
79e21ff9142821b2e3d6e3dc8d812e86da231dbbd1217415b4add748a4c1ce3c.exe
Resource
win10v2004-20240226-en
General
-
Target
79e21ff9142821b2e3d6e3dc8d812e86da231dbbd1217415b4add748a4c1ce3c
-
Size
347KB
-
MD5
7b478edc2b74d7ecdc6b1d9532c9e7f8
-
SHA1
8249c08bc5b032dfa1d2ccca7d3988c494e8697e
-
SHA256
79e21ff9142821b2e3d6e3dc8d812e86da231dbbd1217415b4add748a4c1ce3c
-
SHA512
5efe382eddda3a79c4cfdd90aef8beac1a987c02e6534582f651a07e33cab9baeb7b687cc8a04e67075d4525347ba81aefa65ea8018de2faea9c382bb5ae9ec4
-
SSDEEP
6144:TfraRou9W+ePa6zTmUI6fdyJefiQgHVTB:TfooWW+ey69INTB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79e21ff9142821b2e3d6e3dc8d812e86da231dbbd1217415b4add748a4c1ce3c
Files
-
79e21ff9142821b2e3d6e3dc8d812e86da231dbbd1217415b4add748a4c1ce3c.exe windows:5 windows x86 arch:x86
f29671453df461552b0cc81395241457
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shfolder
SHGetFolderPathW
SHGetFolderPathA
shlwapi
SHDeleteValueA
SHDeleteKeyA
setupapi
SetupOpenInfFileW
SetupFindFirstLineW
SetupGetLineTextW
SetupCloseInfFile
SetupFindNextLine
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
FreeResource
LockResource
LoadResource
GetLastError
FindResourceExW
GetModuleHandleW
FreeLibrary
GetProcAddress
LocalFree
GetModuleFileNameA
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
FindClose
FindNextFileA
FindFirstFileA
RemoveDirectoryA
Sleep
DeleteFileA
SetFileAttributesA
MoveFileA
ExpandEnvironmentStringsA
FindNextFileW
DeleteFileW
FindFirstFileW
GetCommandLineA
CopyFileA
CreateDirectoryA
CreateFileA
HeapFree
HeapAlloc
GetProcessHeap
GetTickCount
GetFileAttributesW
GetUserDefaultUILanguage
RemoveDirectoryW
DeviceIoControl
MultiByteToWideChar
CreateFileW
GetCurrentProcess
CreateDirectoryW
GetSystemDirectoryA
ExitProcess
DeleteCriticalSection
GetSystemTime
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleExA
MoveFileExW
GetFileSizeEx
OutputDebugStringW
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LocalAlloc
SetLastError
GetModuleHandleA
LoadLibraryExW
lstrcmpW
ExpandEnvironmentStringsW
GetFullPathNameW
VerifyVersionInfoW
GetLocaleInfoA
GetSystemDefaultLCID
GetVersionExW
GetSystemDirectoryW
LoadLibraryW
GetFileAttributesA
SetStdHandle
InitializeCriticalSectionAndSpinCount
ReadFile
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
SetFileAttributesW
VerSetConditionMask
GetStringTypeW
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
HeapSize
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
SetFilePointer
GetStringTypeA
user32
MessageBoxW
advapi32
OpenServiceA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
StartServiceW
OpenSCManagerW
EnumDependentServicesW
OpenServiceW
ControlService
QueryServiceStatusEx
CloseServiceHandle
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegOpenKeyW
RegSetValueExW
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
DeleteService
ole32
CoCreateInstance
CoUninitialize
CoInitialize
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ