29d30ba8bc97ba5758bbc0e56618d8df2c265773998362c46db2452cd0e1dfb7

Sharing

Copy URL Twitter E-mail

General

Target

29d30ba8bc97ba5758bbc0e56618d8df2c265773998362c46db2452cd0e1dfb7
Size

1004KB
MD5

2deca02b9edfee00bd0e56ad969189ac
SHA1

7f1cf65c181f63ccff04728e65f836efe7287ce3
SHA256

29d30ba8bc97ba5758bbc0e56618d8df2c265773998362c46db2452cd0e1dfb7
SHA512

a213d7ae3463db00c957dff7b96d9da4b96d8b9bd775ddffcc6e74609ecdf6b5cf76a78895ec14327dc4c7978eab64f4a1973c5110ff39ddfb9b776aa01d05ed
SSDEEP

6144:onBqDa/5b8I9GkRRPaEse3gfgwEaXzE/47MW7dqxGKIBnEsO0kAr0kArAvKzCAvY:oBq68I9Gyav3cAvKzCAvKzJAvKzh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29d30ba8bc97ba5758bbc0e56618d8df2c265773998362c46db2452cd0e1dfb7

Files

29d30ba8bc97ba5758bbc0e56618d8df2c265773998362c46db2452cd0e1dfb7
.dll windows:6 windows x64 arch:x64

de0820f7237c7eff50bb44e9380e1591

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryExA
CloseHandle
QueryPerformanceCounter
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
GetCurrentProcess
GetCurrentProcessId
SwitchToThread
GetCurrentThreadId
GetModuleHandleW
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
InitializeSListHead
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeCriticalSectionAndSpinCount

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler
memcmp
memmove
memcpy
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
memset

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

free
calloc
malloc
_callnewh

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-time-l1-1-0

_time64

Exports

Exports

NvOptimusEnablementCuda
codex_hde_decode_ctx_new
codex_hde_decode_cuda_do
codex_hde_decode_cuda_recommended_sizeof_input_buffer
codex_hde_decode_cuda_sizeof_parameter_buffer
codex_hde_decode_destroy
codex_hde_decode_do
codex_hde_decode_image_size
codex_hde_decode_sizeof_output_buffer
codex_hde_error_detail_code
codex_hde_file_decode_ctx_new_from_encoded_file
codex_hde_file_decode_destroy
codex_hde_file_decode_execute_vendor_file
codex_hde_file_decode_sizeof_output_vendor_file
codex_hde_get_feature_flags
codex_hde_get_version
codex_hde_native_image_type_to_16bit
codex_hde_strerror

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nv_fatb
Size: 809KB - Virtual size: 808KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nvFatBi
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de0820f7237c7eff50bb44e9380e1591

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

Exports

Exports

Sections

.text Size: 114KB - Virtual size: 114KB

.rdata Size: 71KB - Virtual size: 71KB

.data Size: 512B - Virtual size: 11KB

.pdata Size: 4KB - Virtual size: 3KB

.nv_fatb Size: 809KB - Virtual size: 808KB

.nvFatBi Size: 512B - Virtual size: 24B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 114KB - Virtual size: 114KB

.rdata
Size: 71KB - Virtual size: 71KB

.data
Size: 512B - Virtual size: 11KB

.pdata
Size: 4KB - Virtual size: 3KB

.nv_fatb
Size: 809KB - Virtual size: 808KB

.nvFatBi
Size: 512B - Virtual size: 24B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB