nvngx_dlss[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
nvngx_dlss.dll
Size 33.7MB
Sample260825-apvvjavgrf
SHA256 6a12400beedef26ad8a3baca8dde2c6a5859942ce9ae14f78a07f7a87f883321
MD5 e557b8eb18fbd710f82073d9f6fa55a9
SHA1 ae66acaa9118c24f4c0c2bbde6f595604335bc7d
SHA512 f8782fc0cae98291f61f9f43368190ccaaf2f7bd066638599f0d15c6dac0a8e96582d2890bbd3a20ad0b0912449eabada9a68163d13965ebecb4ab1b8f7d6e95
SSDEEP 786432:GlP1qWKMJWs/THQ1qfKds/CJDimkNAFaIwW0WaBHaxuf1IVZ:GB03MJWs/Tw0Cds/CJDimO3IwJWEcudw
TLSH
T18B77DFC96282C9DFC69C4F78858BCFF4E8BDA40B003A5AC74AD8196F1D47AF84D16D52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

nvngx_dlss.dll

.dll 33.7MB

nvngx_dlss.dll

IMPHASH 784f20d86218239f4081a901a3d4330c
SHA256 6a12400beedef26ad8a3baca8dde2c6a5859942ce9ae14f78a07f7a87f883321
MD5 e557b8eb18fbd710f82073d9f6fa55a9
SHA1 ae66acaa9118c24f4c0c2bbde6f595604335bc7d
SHA512 f8782fc0cae98291f61f9f43368190ccaaf2f7bd066638599f0d15c6dac0a8e96582d2890bbd3a20ad0b0912449eabada9a68163d13965ebecb4ab1b8f7d6e95
SSDEEP 786432:GlP1qWKMJWs/THQ1qfKds/CJDimkNAFaIwW0WaBHaxuf1IVZ:GB03MJWs/Tw0Cds/CJDimO3IwJWEcudw
TLSH
T18B77DFC96282C9DFC69C4F78858BCFF4E8BDA40B003A5AC74AD8196F1D47AF84D16D52
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

c2:2d:73:32:2e:10:29:59:9c:69:0b:10:0c:1c:89:a7:37:8c:9a:22:ea:37:a0:0e:e0:c0:1f:7e:9d:cc:6f:2f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=NVIDIA Corporation,OU=1-G,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Chains

Mar 15, 2023

CN=NVIDIA Corporation,OU=1-G,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=NVIDIA Corporation,OU=1-G,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Serial Number

06:36:af:b1:da:06:ca:97:91:38:8b:36:e2:58:d0:48

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 17, 2022 - Oct 15, 2025

Subject

Serial Number

38:63:de:f8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 24, 1999 - Jul 24, 2029

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 22, 2015 - Jun 22, 2029

Subject

CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

56:ab:95:75:28:9c:a5:9f:0e:17:d4:0b:ea:05:c3:1f

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 4, 2022 - Jan 1, 2029

Minor OS version

Major OS version

Entry point

415136

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\dvs\p4\build\sw\devrel\libdev\NGX\snippets\rel_tot\source\features\dlaa\_out\wddm_amd64_release\custom_engine_generic\nvngx_dlss.pdb

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

kernel32

GetProcessHeap SetEndOfFile WriteConsoleW IsDebuggerPresent SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW MultiByteToWideChar WideCharToMultiByte SetLastError GetFullPathNameW GetModuleFileNameW LocalAlloc CreateFileW GetFileAttributesW GetSystemDirectoryW GetModuleHandleExA GetLastError CloseHandle LoadLibraryW GetProcAddress LocalFree VerSetConditionMask GetModuleHandleW FreeLibrary VerifyVersionInfoW LoadLibraryExW GetModuleFileNameA GetModuleHandleA GetStdHandle WriteConsoleA OutputDebugStringA GetCurrentProcessId DeleteCriticalSection EnterCriticalSection LeaveCriticalSection Sleep TryEnterCriticalSection GetCurrentThreadId QueryPerformanceCounter QueryPerformanceFrequency InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount EncodePointer DecodePointer GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW SetEvent ResetEvent WaitForSingleObjectEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW InitializeSListHead SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetCurrentThread GetThreadTimes FreeLibraryAndExitThread GetVersionExW VirtualAlloc VirtualProtect VirtualFree DuplicateHandle ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx CreateTimerQueue GetCommandLineW RtlUnwindEx RtlPcToFileHeader RaiseException GetFileType ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc SetStdHandle ReadFile GetConsoleMode ReadConsoleW FlushFileBuffers WriteFile GetConsoleCP SetFilePointerEx HeapSize GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA