NvContainerTelemetryApi[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

NvContainerTelemetryApi.dll
Size

7.3MB
MD5

d203f17bf173ae37b8b4ffbea346a2cc
SHA1

2cd6ea37d18cdfa9aa05e4a68531c41e6ca1c3b0
SHA256

bbb7fa702f7f465fa7742d63333538a70816c229fdef465e6c7f1148630f7f88
SHA512

99ba492674cab170ddcace6335dfa421df1b0e83b8e2cd65f9b4fa4dcf766ddb7095814412f314fe96e248765b5eda1fec7116dfb5d6e15252f4312bd6ea89a6
SSDEEP

196608:uLSUj8H4ZJDTgAfiD0uClmHQAw7ZSQwj8VNu:uO8980vKBwdSQc8b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NvContainerTelemetryApi.dll

Files

NvContainerTelemetryApi.dll
.dll windows:6 windows x64 arch:x64

071fa25c9950b34e0961bf2a584ecc88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dvs\p4\build\sw\gcomp\rel\src\NvContainer\_out\x86_64\release\telemetry\NvContainerTelemetryApi.pdb

Imports

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GetCurrentProcessId
WriteConsoleW
OutputDebugStringW
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetLastError
FreeLibrary
GetProcAddress
GetSystemDirectoryW
GetNativeSystemInfo
GetModuleFileNameW
WideCharToMultiByte
VerSetConditionMask
CreateFileW
GetFileAttributesW
GetFullPathNameW
CloseHandle
SetLastError
CreateProcessA
CreateProcessW
GetModuleFileNameA
GetModuleHandleW
LoadLibraryExW
LocalAlloc
LocalFree
VerifyVersionInfoW
FlushFileBuffers
HeapSize
SetStdHandle
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
RtlUnwind
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetCurrentThread
HeapFree
HeapAlloc
GetStdHandle
GetFileType
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
SetConsoleCtrlHandler
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetFileSizeEx
SetFilePointerEx

shell32

SHGetFolderPathW

Exports

Exports

cest
qest
qest
Qest
Test
Send_NvcPluginLoadStats_Event
Send_NvcPluginResumeStats_Event
Send_NvcPluginUnloadStats_Event
Send_NvcUnloadStats_Event
Send_NvpWatchdogChildContainerProcessStats_Event

Sections

.text
Size: 731KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

071fa25c9950b34e0961bf2a584ecc88

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

rpcrt4

version

kernel32

shell32

Exports

Exports

Sections

.text Size: 731KB - Virtual size: 731KB

.rdata Size: 161KB - Virtual size: 160KB

.data Size: 8KB - Virtual size: 17KB

.pdata Size: 37KB - Virtual size: 36KB

_RDATA Size: 512B - Virtual size: 384B

.rsrc Size: 6.4MB - Virtual size: 6.4MB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 731KB - Virtual size: 731KB

.rdata
Size: 161KB - Virtual size: 160KB

.data
Size: 8KB - Virtual size: 17KB

.pdata
Size: 37KB - Virtual size: 36KB

_RDATA
Size: 512B - Virtual size: 384B

.rsrc
Size: 6.4MB - Virtual size: 6.4MB

.reloc
Size: 4KB - Virtual size: 3KB