D:\bld_Installer2_0Core\rel\gpu_drv\r265\r265_00\installer2.0\Build\Core\Out\Win32\Release\setup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7cacbd7405dacaad658ac252b21643d6bc64732a8903e0bd45fee463dc8f5d0aN.exe
Resource
win7-20240708-en
General
-
Target
7cacbd7405dacaad658ac252b21643d6bc64732a8903e0bd45fee463dc8f5d0aN
-
Size
889KB
-
MD5
31b0b1b95cb2fbb98db3ee86f477e0d0
-
SHA1
7657164ff5871aab956b4f6ee42067a639dd112b
-
SHA256
7cacbd7405dacaad658ac252b21643d6bc64732a8903e0bd45fee463dc8f5d0a
-
SHA512
3fc86d5222a661e2cc3fefe1c1ebbbbc61eb09229174a848494152c4b9acd48edc4cced6c3fd2fd45ca4c6ac16499eec8a8f45548274a93dff4424093053b915
-
SSDEEP
12288:bkM4UHhB8ZhyKyVkKB0HakTUBL8252uui8FbECP7BhdfswdJ0NXdU8ZWH7DEP1r1:YNU8Sj4XTt2rR8FfBhRJUEbDk1ulUV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cacbd7405dacaad658ac252b21643d6bc64732a8903e0bd45fee463dc8f5d0aN
Files
-
7cacbd7405dacaad658ac252b21643d6bc64732a8903e0bd45fee463dc8f5d0aN.exe windows:5 windows x86 arch:x86
33b47910d18bf399defa10433a2e7da8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetLastError
LoadLibraryW
GetModuleFileNameW
GetProcAddress
GetCurrentProcess
CloseHandle
MultiByteToWideChar
InterlockedIncrement
GetFileAttributesW
GetCurrentDirectoryW
FreeLibrary
GetSystemDirectoryW
CreateDirectoryW
SetCurrentDirectoryW
GetSystemInfo
ExpandEnvironmentStringsW
InterlockedDecrement
SetErrorMode
DebugBreak
Sleep
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetVersionExW
GetLastError
LocalFree
FormatMessageW
InitializeCriticalSection
DeleteCriticalSection
WideCharToMultiByte
FindResourceExW
FindResourceW
LoadResource
LockResource
GetTempPathW
SizeofResource
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetModuleHandleA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LCMapStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
RaiseException
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
FormatMessageA
GetStartupInfoW
RtlUnwind
LoadLibraryA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
ExitProcess
VirtualFree
VirtualAlloc
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
user32
MessageBoxW
advapi32
RegOpenCurrentUser
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteKeyW
RegCloseKey
LsaNtStatusToWinError
ole32
CoInitializeEx
CoInitializeSecurity
CoUninitialize
oleaut32
SafeArrayUnlock
VariantClear
VariantInit
SafeArrayDestroy
VariantChangeType
SysAllocStringLen
SysAllocString
SysFreeString
VariantCopy
SafeArrayLock
SysStringLen
SafeArrayCreate
SafeArrayGetLBound
SafeArrayGetUBound
Exports
Exports
GetNvidiaModuleFirstTimestamp
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 584KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE