denuvo(1)[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

denuvo(1).exe
Size

3.9MB
MD5

21e4d229e67971abede49de4d1c501d6
SHA1

9b688958f1a1932f34ce24abe8aa1355bf510cea
SHA256

0faf491ddc77fd6e2d323f612dd9512c2525ad617bcd2a887e89c494f9f7858e
SHA512

137821dd623ee1dba6de230af441ce099ad30ef532f9e64b9c59667f6792146b6963433304cc6321a909fa9ce2abcdef76bd81fc07507f16e85a76a362eb9848
SSDEEP

98304:nYJDiZpn+8vcAA2rX/Hg3zVK6xg+17q7pN2cPxv:mircaviY6K+17GNL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
denuvo(1).exe

Files

denuvo(1).exe
.exe windows:4 windows x86 arch:x86

8e05a7e2151e8e6a910fd7441396019f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetTickCount
lstrcatW
LoadLibraryW
lstrcmpiA
VirtualQuery
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
SetLastError
HeapFree
GetProcessHeap
HeapReAlloc
HeapAlloc
FindResourceExA
GetUserDefaultUILanguage
CompareStringA
GetLastError
GetEnvironmentVariableA
CompareStringW
SetEvent
GetCurrentProcessId
CloseHandle
WaitForSingleObject
GetSystemTimeAsFileTime
WriteFile
SetFileTime
lstrcpyW
FindFirstFileW
FindClose
FormatMessageA
CreateFileA
ReadFile
IsBadReadPtr
CreateEventA
GetModuleFileNameA
SetFilePointer
GetCurrentProcess
GetWindowsDirectoryA
GetVolumeInformationA
FindFirstFileExA
FindNextFileA
IsWow64Process
GetFileAttributesExA
GetFullPathNameA
Sleep
FreeLibrary
SetEnvironmentVariableW
FlushInstructionCache
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
HeapCreate
VirtualFree
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ResumeThread
ExitThread
GetSystemInfo
VirtualAlloc
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapDestroy
GetVersionExA
RaiseException
WideCharToMultiByte
lstrlenW
lstrcmpiW
SetEnvironmentVariableA
IsBadWritePtr
VirtualProtect
ExitProcess
lstrcmpA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
InterlockedExchange
GlobalFree
GlobalUnlock
LeaveCriticalSection
GlobalLock
EnterCriticalSection
GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceA
lstrcpyA
lstrlenA
GetModuleHandleA

user32

UnregisterClassA
GetWindowLongA
LoadCursorA
SetCursor
GetWindowRect
CallWindowProcA
GetSystemMetrics
SetWindowLongA
GetParent
GetCursorPos
GetDesktopWindow
MapWindowPoints
SetWindowPos
SendMessageA
SetForegroundWindow
ReleaseCapture
PostMessageA
BeginPaint
GetMessageA
TranslateMessage
DrawIcon
DispatchMessageA
LoadIconA
CreateDialogIndirectParamA
SetTimer
EndPaint
KillTimer
DestroyWindow
EndDialog
PtInRect
LoadStringA
GetDC
FillRect
GetClientRect
ReleaseDC
SetClassLongA
wsprintfA
GetWindowTextLengthA
TrackMouseEvent
SetWindowTextA
SetActiveWindow
IsDialogMessageA
EnableWindow
GetActiveWindow
UpdateWindow
AdjustWindowRectEx
MessageBoxW
CreateWindowExA
RegisterClassExA
DefWindowProcA
ShowWindow
SetFocus
TranslateAcceleratorA
DrawFocusRect
DrawTextA
SetCapture
GetWindowTextA
DrawEdge
InvalidateRect
OffsetRect
LoadImageA
GetClassNameA
PostQuitMessage
ScreenToClient
MessageBoxA

gdi32

GetDIBColorTable
SetDIBColorTable
StretchBlt
CreateFontIndirectA
DeleteObject
CreateDIBSection
CreateSolidBrush
SelectObject
MoveToEx
CreatePen
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
TextOutA
DeleteDC
SetTextColor
GetStockObject
SetBkMode
GetTextExtentPointA
LineTo
GetObjectA

advapi32

RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegSetValueExA

shell32

SHGetFolderPathA

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CreateStreamOnHGlobal

oleaut32

GetErrorInfo
SafeArrayDestroy
SafeArrayGetElement
SafeArrayPutElement
SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
VariantClear
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen

gdiplus

GdipAlloc
GdipFree
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipGetImagePalette
GdipDeleteGraphics
GdipGetImagePaletteSize
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipDrawImageI
GdipCreateBitmapFromStream

msimg32

TransparentBlt
AlphaBlend

iphlpapi

GetAdaptersInfo

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 404KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.\/E
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 380KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e05a7e2151e8e6a910fd7441396019f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

gdiplus

msimg32

iphlpapi

version

Sections

.text Size: 404KB - Virtual size: 401KB

.rdata Size: 120KB - Virtual size: 118KB

.data Size: 1.2MB - Virtual size: 1.2MB

.\/E Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 380KB - Virtual size: 378KB

.text
Size: 404KB - Virtual size: 401KB

.rdata
Size: 120KB - Virtual size: 118KB

.data
Size: 1.2MB - Virtual size: 1.2MB

.\/E
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 380KB - Virtual size: 378KB