C:\dvs\p4\build\sw\rel\gpu_drv\installer_core\installer_core_vs2017\Build\Core\Out\Win32\Release\setup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
726a87740ad38ced6aefbc528b0650e1d71e01faf8aec0f92ae639df98e907e9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
726a87740ad38ced6aefbc528b0650e1d71e01faf8aec0f92ae639df98e907e9.exe
Resource
win10v2004-20240802-en
General
-
Target
726a87740ad38ced6aefbc528b0650e1d71e01faf8aec0f92ae639df98e907e9
-
Size
1.0MB
-
MD5
28b928de4ba7f872726e4552ba30b09f
-
SHA1
3d61ddfe77dad413624151709aa426a6673ad55b
-
SHA256
726a87740ad38ced6aefbc528b0650e1d71e01faf8aec0f92ae639df98e907e9
-
SHA512
491211a55d7335d8123e1f39b34201569a296b0489327a284f21387ef9d95420fd5f4fc8a258d2aae9d5a036cb71ab903df45a50e2f0c017f6c77d7610c7736b
-
SSDEEP
24576:29d2j4JtB1Xit2rR8FfBhRJUEbDk1ulUX:TE3B1Xit2r4PRSEk1ul
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 726a87740ad38ced6aefbc528b0650e1d71e01faf8aec0f92ae639df98e907e9
Files
-
726a87740ad38ced6aefbc528b0650e1d71e01faf8aec0f92ae639df98e907e9.exe windows:6 windows x86 arch:x86
bfcee1240661504ba61e4e75216de3b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetErrorMode
SetLastError
RaiseException
DecodePointer
DebugBreak
Sleep
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
CreateEventW
GetVersionExW
LocalFree
FormatMessageW
InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
WideCharToMultiByte
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
FindResourceExW
FindResourceW
LoadResource
LockResource
CloseHandle
SizeofResource
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
LoadLibraryW
FileTimeToSystemTime
MultiByteToWideChar
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindNextFileW
GetFileAttributesW
GetTempPathW
GetCurrentProcess
GetSystemDirectoryW
lstrcmpW
ExpandEnvironmentStringsW
LocalAlloc
VerSetConditionMask
CompareFileTime
GetFullPathNameW
OutputDebugStringW
GetModuleHandleW
LoadLibraryExW
lstrcmpA
VerifyVersionInfoW
GetSystemInfo
FormatMessageA
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
ExitProcess
GetStdHandle
WriteFile
GetACP
GetFileType
LCMapStringW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
user32
MessageBoxW
advapi32
RegOpenCurrentUser
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
LsaNtStatusToWinError
ole32
CoInitializeSecurity
CoInitializeEx
CoUninitialize
oleaut32
SafeArrayCreate
SafeArrayGetVartype
SafeArrayCopy
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
VariantClear
VariantInit
SafeArrayDestroy
SysStringLen
SysAllocStringLen
SysAllocString
SysFreeString
Sections
.text Size: 245KB - Virtual size: 245KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 584KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE