C:\dvs\p4\build\sw\rel\gpu_drv\r421\r431_65\drivers\ui\uxd\bin\x64\Release\NvCpl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e693652763141522621f9fcd80efb30cefa363f8bd9bdc65e5ffbf9fb8d76d3b.jpg.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e693652763141522621f9fcd80efb30cefa363f8bd9bdc65e5ffbf9fb8d76d3b.jpg.dll
Resource
win10v2004-20240802-en
General
-
Target
e693652763141522621f9fcd80efb30cefa363f8bd9bdc65e5ffbf9fb8d76d3b.jpg.exe
-
Size
5.2MB
-
MD5
dc7b4c31d6c00ca158ad953beab6cea7
-
SHA1
513d1ccac85d23e801d3369e3ddae64c0cda5ee9
-
SHA256
e693652763141522621f9fcd80efb30cefa363f8bd9bdc65e5ffbf9fb8d76d3b
-
SHA512
b052d1042e53e792f2fa9ac95809c6a72f28d45ba56415f55afe978dc5d97a4f2f7f904c10ed005cd9d14156c1fde560a0447f8fc0a70f2b3089172cebd5abbf
-
SSDEEP
49152:m6WGaLDxEkxYyYlHm6MZJOf0Dx9x30XJ3a4x8jI1KcsPn++pFcfJwdVwbrT+XtSY:mfUGoixEQlF9dVwbbiAoD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e693652763141522621f9fcd80efb30cefa363f8bd9bdc65e5ffbf9fb8d76d3b.jpg.exe
Files
-
e693652763141522621f9fcd80efb30cefa363f8bd9bdc65e5ffbf9fb8d76d3b.jpg.exe.dll regsvr32 windows:6 windows x64 arch:x64
5c790215762924ed8391b33c0b9ac19c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
wtsapi32
WTSEnumerateSessionsW
WTSFreeMemory
WTSQueryUserToken
shlwapi
SHDeleteKeyW
PathFindFileNameW
PathCombineA
setupapi
SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
kernel32
SetStdHandle
CloseHandle
CreateEventA
SetEvent
WaitForSingleObject
GetLastError
CreateEventW
GetProcessHeap
HeapFree
HeapAlloc
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObjectEx
RaiseException
GetCurrentThreadId
SetLastError
InitializeCriticalSectionEx
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetProcessTimes
GetCurrentProcess
CreateMutexW
CreateFileW
GetModuleFileNameW
ExpandEnvironmentStringsW
ReleaseMutex
WriteFile
WideCharToMultiByte
GetFileSizeEx
OutputDebugStringW
OpenEventW
OpenSemaphoreW
WaitForMultipleObjects
ReleaseSemaphore
ResetEvent
DecodePointer
TerminateProcess
GetVersionExW
WriteConsoleW
GetLocaleInfoW
LoadLibraryExW
FindResourceExW
LoadResource
LockResource
FreeLibrary
GetSystemDirectoryA
ProcessIdToSessionId
Sleep
GetSystemDefaultLCID
GetCurrentProcessId
GetUserDefaultUILanguage
FormatMessageW
LocalFree
HeapDestroy
HeapReAlloc
HeapSize
OpenMutexW
GetSystemDirectoryW
LocalAlloc
VerSetConditionMask
VerifyVersionInfoW
SizeofResource
FindResourceW
GetProcAddress
InitializeCriticalSection
GetFileAttributesW
GetFullPathNameW
GetModuleHandleW
RtlLookupFunctionEntry
GetConsoleMode
RtlCaptureContext
VirtualFree
GetConsoleCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetFileType
GetStdHandle
GetACP
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
ReadFile
RtlUnwindEx
InterlockedFlushSList
VirtualAlloc
RtlPcToFileHeader
GetStartupInfoW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
ReadConsoleW
FlushFileBuffers
FlushInstructionCache
InterlockedPushEntrySList
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
QueryDosDeviceW
GetVolumePathNamesForVolumeNameW
lstrcpyW
MultiByteToWideChar
GetStringTypeW
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
CompareStringW
LCMapStringW
GetCPInfo
WaitForMultipleObjectsEx
OpenEventA
SetWaitableTimer
ResumeThread
GetModuleHandleA
CreateWaitableTimerA
SystemTimeToFileTime
FormatMessageA
CreateDirectoryW
DeleteFileW
FindClose
RemoveDirectoryW
SetEndOfFile
SetFilePointerEx
DeviceIoControl
MoveFileExW
AreFileApisANSI
IsDebuggerPresent
InitializeSListHead
InterlockedPopEntrySList
RtlVirtualUnwind
advapi32
RegQueryValueExW
LookupAccountSidW
DuplicateTokenEx
GetTokenInformation
RevertToSelf
ImpersonateLoggedOnUser
RegOpenCurrentUser
RegCloseKey
RegEnumKeyExW
RegOpenKeyW
RegEnumValueW
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
TraceMessage
ole32
CoCreateGuid
CoInitializeEx
CoCreateInstance
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoTaskMemRealloc
CoUninitialize
Exports
Exports
DMGetProjectedGDIModeList
DMNvCplObtainTVFormatStringIDsByLocaleA
DMNvCplObtainTVFormatStringsByLocaleA
DMReleaseMemory
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ExportNvCplAdapterString
ExportNvWsApps
GetdtcfgLastError
GetdtcfgLastErrorEx
IdentifyMonitors
LoadNVPanel
MediaCenterCommand
NVTVOutManageOverscanConfiguration
NV_WMIACPI_CancelEventQuery
NV_WMIACPI_Cleanup
NV_WMIACPI_DataBlockExecEventQuery
NV_WMIACPI_DataBlockOp
NV_WMIACPI_Setup
NvAccessAPIPolicies
NvCheckDriverState
NvCheckSLIMosaicHWCompatability
NvCleanup
NvColorGetGammaRamp
NvColorGetGammaRampEx
NvColorSetGammaRamp
NvColorSetGammaRampEx
NvCplApiAddUnsupportedResolutionToCache
NvCplApiAssociateProfile
NvCplApiAssociateProfileW
NvCplApiBlockDisplayChange
NvCplApiCTCalc
NvCplApiCTDelete
NvCplApiCTEnum
NvCplApiCTTest
NvCplApiClearAllUnsupportedResolutionsFromCacheForDisplay
NvCplApiClearCallback
NvCplApiClose
NvCplApiCoProcStatus
NvCplApiCompareState
NvCplApiCompareStateSettings
NvCplApiConnectGPU
NvCplApiCreateProfile
NvCplApiCreateProfileW
NvCplApiDPDirectory
NvCplApiDPInfo
NvCplApiDPInfoW
NvCplApiDPLoad
NvCplApiDPLoadW
NvCplApiDPSave
NvCplApiDPSaveW
NvCplApiDebug
NvCplApiDeleteCustomResCreatedForUnsupportedHDFormat
NvCplApiDeleteProfile
NvCplApiDeleteProfileW
NvCplApiDeleteUnderScan
NvCplApiDisableSpan
NvCplApiDisassociateProfile
NvCplApiEnableEcc
NvCplApiEnumApps
NvCplApiEnumAppsW
NvCplApiEnumDeviceTypeAndName
NvCplApiEnumDisconnectedGPU
NvCplApiEnumPersistedUnsupportedResolutionsFromCache
NvCplApiEnumProfiles
NvCplApiEnumProfilesW
NvCplApiEnumSettingDependencies
NvCplApiEnumSettingIDs
NvCplApiEnumSettingValues
NvCplApiEnumSettingValuesEx
NvCplApiExecute
NvCplApiFlushUnsupportedResolutionCacheToStorage
NvCplApiGetConnectedMask
NvCplApiGetCurrentProfile
NvCplApiGetCurrentProfileW
NvCplApiGetCurrentScanLine
NvCplApiGetDefaultAppProfile
NvCplApiGetDefaultAppProfileW
NvCplApiGetDeviceAddressFromOutputId
NvCplApiGetDisplayNameFromEDID
NvCplApiGetDisplayPosition
NvCplApiGetDriverLoadedState
NvCplApiGetDualViewPolicyState
NvCplApiGetEDID
NvCplApiGetEDIDMaximumRefreshRate
NvCplApiGetEDIDMinimumRefreshRate
NvCplApiGetEccInfoList
NvCplApiGetFlatPanelInfo
NvCplApiGetFriendlyMonitorName
NvCplApiGetFriendlyName
NvCplApiGetFriendlyNameW
NvCplApiGetGPUAddressFromGSyncAddress
NvCplApiGetGPUConnectorInfo
NvCplApiGetGPUCount
NvCplApiGetGPUFromMoniker
NvCplApiGetGPUGDIInfo
NvCplApiGetGPUInfo
NvCplApiGetGPUInfoNVAPI
NvCplApiGetGSyncAddressFromGPUAddress
NvCplApiGetGSyncCount
NvCplApiGetGpuConnectorFromGpuIdAndLocationIndex
NvCplApiGetGpuFromGpuId
NvCplApiGetHICCount
NvCplApiGetHybridMode
NvCplApiGetInfo
NvCplApiGetIsGeforceOnlyStatus
NvCplApiGetLogicalGPUCount
NvCplApiGetNVSStatus
NvCplApiGetNViewEnablePolicyState
NvCplApiGetOutputFromDisplayId
NvCplApiGetPhysicalGPUCount
NvCplApiGetPipelineInterfaceCookies
NvCplApiGetProfileSetting
NvCplApiGetProfileSettingW
NvCplApiGetProfileState
NvCplApiGetProfileStateW
NvCplApiGetProfilesDirtyState
NvCplApiGetQuadroPlexCount
NvCplApiGetQuadroStatus
NvCplApiGetRecentlyRunApps
NvCplApiGetRegKeyInfo
NvCplApiGetSetting
NvCplApiGetSettingDefaultState
NvCplApiGetSettingDefaultStateW
NvCplApiGetSettingDefaultValue
NvCplApiGetSettingDefaultValueW
NvCplApiGetSettingType
NvCplApiGetSpanConfig
NvCplApiGetStateError
NvCplApiGetStateErrorFlag
NvCplApiGetSurroundHotkeys
NvCplApiGetTargetForAddress
NvCplApiI2CRead
NvCplApiI2CReadByName
NvCplApiI2CWrite
NvCplApiI2CWriteByName
NvCplApiInit
NvCplApiIsArchitectureMaxwell
NvCplApiIsArchitectureMaxwellPlus
NvCplApiIsArchitecturePascalPlus
NvCplApiIsDisplayUnattached
NvCplApiIsHDTVFormat
NvCplApiIsSDIDisplay
NvCplApiIsXGpuPresentInSystem
NvCplApiManageState
NvCplApiMsHybridStatus
NvCplApiMuxdClose
NvCplApiMuxdInitialize
NvCplApiPolicies
NvCplApiProcessInfo
NvCplApiRefreshNvTrayIcon
NvCplApiRefreshPersistedUnsupportedResolutionsCache
NvCplApiRegisterModeChangeFilter
NvCplApiResetErrorCount
NvCplApiRestoreDefaultAllProfiles
NvCplApiRestoreDefaultFrlForProfileW
NvCplApiRestoreDefaultProfile
NvCplApiRestoreDefaultProfileW
NvCplApiRestoreDefaultSetting
NvCplApiRestoreDefaultSettingsW
NvCplApiSetCallback
NvCplApiSetCurrentProfile
NvCplApiSetCurrentProfileW
NvCplApiSetEDID
NvCplApiSetProfileSetting
NvCplApiSetProfileSettingW
NvCplApiSetRegKeyInfo
NvCplApiSetSetting
NvCplApiSetSpanConfig
NvCplApiSetSurroundHotkeys
NvCplApiShouldShowEccPage
NvCplApiShowOptimusTrayUI
NvCplApiValidateEdid
NvCplApiValidateNextState
NvCplApiValidateSpanConfigAndGetDisplaySettings
NvCplApplyColorProfile
NvCplChangeDisplaySettings
NvCplDaemon
NvCplDeviceManagerState
NvCplFSUnderScan
NvCplFSUnderScanAvailable
NvCplForceFSUnderScan
NvCplForceSecondaryCrtDetect
NvCplForceTVConnection
NvCplGetActiveDevicesString
NvCplGetAdapterStringEx
NvCplGetAvailableDevicePairs
NvCplGetClearViewGeometry
NvCplGetClearViewMonConfigLimit
NvCplGetColorSpace
NvCplGetConnectedDevicesString
NvCplGetDataInt
NvCplGetDebugLevel
NvCplGetDigitalVibranceLevel
NvCplGetDisplayCaps
NvCplGetExtendedMode
NvCplGetFlatPanelNativeRes
NvCplGetFrameSyncTimingStatus
NvCplGetIncomingFrameSync
NvCplGetMSOrdinalDeviceString
NvCplGetMosaicOverlapLimits
NvCplGetMosaicTopoGroup
NvCplGetPowerMizerMenuItem
NvCplGetPowerMizerMenuItem2
NvCplGetPrunedCurrentGDIModelist
NvCplGetRealConnectedDevicesString
NvCplGetScalingStatus
NvCplGetSupportedMosaicTopoInfo
NvCplGetThermalSettings
NvCplGetUserTokenAndName
NvCplGetViewConfiguration
NvCplHandleDisplayChange
NvCplHandleFlushUnattachEvent
NvCplHandleGSyncEvent
NvCplHandleHotKeyEvent
NvCplHandleHotPlug
NvCplHandleHotplugEvents
NvCplHandleSysconStatusEvent
NvCplHotKeyEvent
NvCplIndicatorNotify
NvCplIsExternalPowerConnectorAttached
NvCplIsMultiGPUSupportedAndDisabled
NvCplIsMultiGPUSupportedAndEnabled
NvCplLaunchSliWebLink
NvCplLimitedUserNvPanelVisibilityAllowed
NvCplManageUserSettings
NvCplMergeAppProfiles
NvCplMonitorDetection
NvCplMoveWindow
NvCplOpkSupport
NvCplOverrideRefreshRate
NvCplPCSetup
NvCplPCSetupCL
NvCplPerformDpLinkTraining
NvCplPrimaryPop
NvCplPrimaryPush
NvCplReduceOrphanedDualViewDisplays
NvCplRefreshConnectedDevices
NvCplResetToLastActive
NvCplResetToLastMode
NvCplRestorePersistence
NvCplRscMgrLoadDialogCtrlStrings
NvCplRscMgrLoadString
NvCplSetClearViewMonConfigLimit
NvCplSetColorSpace
NvCplSetDataInt
NvCplSetDebugLevel
NvCplSetDigitalVibranceLevel
NvCplSetDisplayMode
NvCplSetExtendedMode
NvCplSetFrameSyncClient
NvCplSetFrameSyncServer
NvCplStartupRunOnce
NvCplTriggerPageUpdate
NvCplUpdateClrSchemes
NvCplValidatePCSetup
NvCplclrApplyCurrentColors
NvCycleDisplayDevice
NvCycleDisplayDeviceEx
NvDeleteTaskbarMenuItems
NvDeviceMaskToMoniker
NvElevateLaunchAppOnCoproc
NvEnableDVDProtection
NvEnableMosaic
NvEnumDisplaySettings
NvEnumPhysicalConnectorDetails
NvGetCurrentDisplayDevice
NvGetCurrentTVFormat
NvGetDVIAdvancedTimingSupport
NvGetDefaultDisplaySettings
NvGetDisplayCustomName
NvGetDisplayInfo
NvGetErrorMessageA
NvGetErrorMessageW
NvGetFullScreenVideoMirroringEnabled
NvGetHotKey
NvGetLastDisplaySettings
NvGetLastError
NvGetLastErrorMessageA
NvGetLastErrorMessageW
NvGetOverscanMode
NvGetPanelBrightness
NvGetPhysicalConnectorInfo
NvGetRealDVIAdvancedTimingSupport
NvGetShowLicenseKeyAgreement
NvGetTVConnectedStatus
NvGetTaskbarMenuItems
NvGetWindowsDisplayState
NvGvoCaps
NvGvoClose
NvGvoConfigGet
NvGvoConfigSet
NvGvoDesktopClose
NvGvoDesktopOpen
NvGvoEnumDataFormats
NvGvoEnumSignalFormats
NvGvoIsFrameLockModeCompatible
NvGvoIsRunning
NvGvoOpen
NvGvoStart
NvGvoStatus
NvGvoStop
NvGvoSyncFormatDetect
NvHandleOwnerDrawMessages
NvLoadDeskProfile
NvQTwDispModeWarning
NvQTwGetCurrentMode
NvQTwHandleDFPResWarning
NvQTwLaunchOvlCtrlPage
NvQTwSetNativeResolution
NvQueryDVDProtection
NvQueryMenuInit
NvRefreshDisplaySettingsPage
NvSelectDisplayDevice
NvSessionStartup
NvSetDVDOptimalEnabled
NvSetDisplayCustomName
NvSetFullScreenVideoMirroringEnabled
NvSetHDAspect
NvSetHotKeyA
NvSetHotKeyW
NvSetOEMConfig
NvSetPanelBrightness
NvSetRmAcStatus
NvSetShowLicenseKeyAgreement
NvShowLicenseKeyAgreement
NvStartup
NvStartupFirstRunAfterInstSystemAccount
NvStartupFirstRunAfterInstUserAccount
NvStartupInstall3DProfiles
NvStartupRunOnEachSessionUserAccount
NvStartupRunOnFirstSessionSystemAccount
NvStartupRunOnFirstSessionUserAccount
NvStartupRunWinSATAssessment
NvStartupWorkstationRunOnFirstSession
NvTaskBarMenuCmd
NvUpdateWhiteList
NvValidateNvidiaCapable
PowerManageHelper_Nvcpl
ProcessLidChange
RestoreCplInfo
SaveCplInfo
ShellExecuteLoadNVPanel
StartGfeService
dtcfg
dtcfgex
easysetview
exportstate
launchhdtvdesktop
launchoverlayapplet
launchpowermizerapplet
launchtvapplet
nvGetPwrMzrLevel
nvSetPwrMzrLevel
queryappprofiles
resetview
scaleview
setappprofile
setview
setvsync
updategamma
updateview
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 186KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 13B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ