alvr_dashboard.pdb
Static task
static1
General
-
Target
ALVR Dashboard.exe
-
Size
17.6MB
-
MD5
12ecc5b7a534b43c968bb17726c6529f
-
SHA1
0198cb0aaaef3dd709eb7daaa47c343881a6e3b0
-
SHA256
71cba2d0a358481aec37eda7fd663cd7b8ede51734850cd3693aa05324b5d989
-
SHA512
ea07cd7157f4a8c9ad4718064b41a9804359949dfcad63619011ad0f4dbf54f24bf2b82a074247e9dbd6a1523e83e87986b4420ad249583f724b661c313320ad
-
SSDEEP
98304:MsnJXjshDfqpf7gLvfw53Re0tZZtrDgdoT6aNvhi7fzCWN/WJb2zvbYYYYYU3+so:MC/pfQADgdoOa+/NOsbYYYYYU3K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ALVR Dashboard.exe
Files
-
ALVR Dashboard.exe.exe windows:6 windows x64 arch:x64
2cabe5dc1d1e0997a56a5bdfeea44886
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WaitOnAddress
WakeByAddressSingle
bcryptprimitives
ProcessPrng
kernel32
GetTimeZoneInformationForYear
CloseHandle
WaitForMultipleObjects
GetOverlappedResult
WaitForSingleObject
GetExitCodeProcess
GetCurrentThreadId
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentThread
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetEnvironmentVariableW
GetSystemTimePreciseAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
GetProcAddress
SwitchToThread
SetLastError
GlobalUnlock
GlobalFree
LoadLibraryExA
GetConsoleScreenBufferInfo
OpenProcess
HeapReAlloc
GetLastError
HeapFree
K32GetPerformanceInfo
SetConsoleTextAttribute
GlobalMemoryStatusEx
GetSystemInfo
LocalFree
VirtualQueryEx
ReadProcessMemory
SetConsoleMode
GetConsoleMode
GetProcessIoCounters
MultiByteToWideChar
GlobalAlloc
GlobalLock
GetSystemTimes
GetProcessTimes
GetFileType
GetProcessHeap
HeapAlloc
ExitProcess
ReadFile
CancelIo
CreateEventW
WriteFileEx
GetStdHandle
lstrlenW
SleepEx
ReadFileEx
CreateThread
GlobalSize
LoadLibraryW
CreateNamedPipeW
DeleteProcThreadAttributeList
UpdateProcThreadAttribute
SetThreadErrorMode
LoadLibraryExW
FreeLibrary
InitializeProcThreadAttributeList
DuplicateHandle
Sleep
GetModuleHandleA
GetFileAttributesW
CreateProcessW
WriteConsoleW
CreateWaitableTimerExW
SetWaitableTimer
QueryPerformanceFrequency
GetModuleHandleW
FormatMessageW
GetCurrentDirectoryW
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcess
GetCurrentProcessId
CreateMutexA
WideCharToMultiByte
ReleaseMutex
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetEnvironmentVariableW
GetTempPathW
GetModuleFileNameW
CreateFileW
SetFileInformationByHandle
GetFileInformationByHandle
GetFileInformationByHandleEx
GetWindowsDirectoryW
GetFullPathNameW
CreateDirectoryW
FindFirstFileW
FindClose
GetSystemDirectoryW
CompareStringOrdinal
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleInformation
TerminateProcess
oleaut32
SafeArrayCreateVector
SafeArrayPutElement
SetErrorInfo
SysAllocStringLen
SysStringLen
SysFreeString
GetErrorInfo
user32
RegisterTouchWindow
MapVirtualKeyExW
GetKeyboardLayout
ToUnicodeEx
ShowWindow
GetSystemMenu
EnableMenuItem
SetWindowLongW
GetWindowLongW
AdjustWindowRectEx
GetClipCursor
ClipCursor
ShowCursor
RegisterWindowMessageA
SetWindowDisplayAffinity
SystemParametersInfoA
ClientToScreen
SetWindowPlacement
RegisterRawInputDevices
GetClassNameW
GetWindowRect
DefWindowProcW
GetClipboardData
IsClipboardFormatAvailable
ValidateRect
GetRawInputData
FlashWindowEx
GetKeyboardState
DispatchMessageW
GetWindowTextLengthW
TranslateMessage
KillTimer
GetAsyncKeyState
DestroyIcon
CreateIconFromResourceEx
GetWindowTextW
GetClassInfoExW
GetPropW
SetClipboardData
PeekMessageW
GetMessageW
GetKeyState
SetCursorPos
SetForegroundWindow
SendInput
MapVirtualKeyW
CreateWindowExW
RegisterClassExW
MonitorFromPoint
SetCursor
LoadCursorW
MonitorFromWindow
GetCursorPos
CloseTouchInputHandle
GetTouchInputInfo
RedrawWindow
TrackMouseEvent
ReleaseCapture
SetCapture
MonitorFromRect
GetWindowPlacement
DestroyWindow
ScreenToClient
GetMenu
CallWindowProcW
InvalidateRgn
SetWindowPos
SetWindowTextW
GetMonitorInfoW
EnumDisplayMonitors
PostMessageW
GetForegroundWindow
GetDC
GetWindowLongPtrW
IsIconic
GetClientRect
SendMessageW
GetSystemMetrics
GetActiveWindow
ReleaseDC
EmptyClipboard
SetWindowLongPtrW
RemovePropW
CloseClipboard
OpenClipboard
IsProcessDPIAware
SetTimer
CreateIcon
ChangeDisplaySettingsExW
SetPropW
uiautomationcore
UiaLookupId
UiaReturnRawElementProvider
UiaRaiseAutomationPropertyChangedEvent
UiaRaiseAutomationEvent
UiaHostProviderFromHwnd
UiaGetReservedNotSupportedValue
ws2_32
WSAGetLastError
send
select
getsockopt
setsockopt
WSARecv
recv
getpeername
ioctlsocket
getsockname
WSADuplicateSocketW
getaddrinfo
closesocket
connect
WSASend
freeaddrinfo
WSACleanup
WSAStartup
WSASocketW
bcrypt
BCryptGenRandom
advapi32
ImpersonateAnonymousToken
CopySid
GetLengthSid
IsValidSid
GetTokenInformation
SystemFunction036
RevertToSelf
OpenProcessToken
ole32
OleInitialize
RegisterDragDrop
CoCreateInstance
PropVariantClear
CoUninitialize
CoInitializeEx
RevokeDragDrop
CoTaskMemFree
shell32
DragFinish
CommandLineToArgvW
DragQueryFileW
ShellExecuteExW
SHGetKnownFolderPath
gdi32
DescribePixelFormat
ChoosePixelFormat
DeleteObject
GetDeviceCaps
CreateRectRgn
SwapBuffers
SetPixelFormat
opengl32
wglGetProcAddress
wglGetCurrentContext
wglShareLists
wglGetCurrentDC
wglCreateContext
wglDeleteContext
wglMakeCurrent
imm32
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmAssociateContextEx
ImmSetCandidateWindow
dwmapi
DwmEnableBlurBehindWindow
shlwapi
AssocQueryStringW
ntdll
NtQueryInformationProcess
RtlNtStatusToDosError
NtReadFile
NtQuerySystemInformation
NtWriteFile
RtlGetVersion
psapi
GetModuleFileNameExW
GetProcessMemoryInfo
pdh
PdhGetFormattedCounterValue
PdhAddEnglishCounterW
PdhCloseQuery
PdhCollectQueryData
PdhRemoveCounter
PdhOpenQueryA
powrprof
CallNtPowerInformation
uxtheme
SetWindowTheme
vcruntime140
memset
__current_exception_context
__current_exception
__C_specific_handler
_CxxThrowException
memcmp
memmove
memcpy
__CxxFrameHandler3
api-ms-win-crt-math-l1-1-0
round
sinf
expf
_hypotf
powf
floor
sin
trunc
fmod
log10
ceil
pow
atan2f
cosf
exp2f
acosf
cbrtf
__setusermatherr
ceilf
roundf
cos
floorf
api-ms-win-crt-string-l1-1-0
wcslen
strlen
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_cexit
terminate
_initialize_onexit_table
__p___argv
_register_onexit_function
_c_exit
__p___argc
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_set_app_type
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
Sections
.text Size: 13.5MB - Virtual size: 13.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ