d2d1[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

d2d1.dll
Size

3.8MB
MD5

99c8a7c8be3b0c9237b3a1c2cf97508e
SHA1

ee2226b6fab0239a65b8945422fc6750a68b9032
SHA256

1dcbddb75b4fdc02ee7fd628eaac3e13bb4d122bab989eda23b04ad5fad816e9
SHA512

0fcda485dc86e80df60f7a4e2a1def975dd8230ad6e81a96937aa6b1be98dd6af950be61c3718a0794a2068e585e3c621d799ca5569a936e4b11c3cba7abe68f
SSDEEP

49152:203JlRW7h9hpWmKDW/Oc3qWfKQLpywe8fr3OnWoOAqgWV2U3+R3Y3d3eWwgnt+0R:J3c9ffq9FcBzMQ

Score

1^/10

Malware Config

Signatures

Files

d2d1.dll
.dll windows x64

28ae043c6cd9bdddbe5759afda97f9e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

d3d10_1

D3D10CreateDevice1

gdi32

BitBlt
GetDeviceCaps

kernel32

DelayLoadFailureHook
DeleteCriticalSection
EnterCriticalSection
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
IsBadStringPtrW
LeaveCriticalSection
RaiseException
ResolveDelayLoadedAPI

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_assert
_fdclass
_strdup
atan2
atan2f
bsearch
cosf
free
fwrite
getenv
memcmp
memcpy
memmove
memset
powf
qsort
sinf
sqrtf
strchr
strcmp
strcpy
strcspn
strlen
strrchr
tan
tanf

user32

GetDC
IsWindow
ReleaseDC

Exports

Exports

D2D1ConvertColorSpace
D2D1CreateDevice
D2D1CreateDeviceContext
D2D1CreateFactory
D2D1InvertMatrix
D2D1IsMatrixInvertible
D2D1MakeRotateMatrix
D2D1MakeSkewMatrix
D2D1SinCos
D2D1Tan
D2D1Vec3Length

Sections

.text
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 320B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 624KB - Virtual size: 622KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28ae043c6cd9bdddbe5759afda97f9e0

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

d3d10_1

gdi32

kernel32

ntdll

ucrtbase

user32

Exports

Exports

Sections

.text Size: 196KB - Virtual size: 194KB

.data Size: 4KB - Virtual size: 368B

.rodata Size: 4KB - Virtual size: 100B

.rdata Size: 116KB - Virtual size: 115KB

.pdata Size: 12KB - Virtual size: 8KB

.xdata Size: 12KB - Virtual size: 10KB

.bss Size: - Virtual size: 320B

.edata Size: 68KB - Virtual size: 66KB

.idata Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 4KB - Virtual size: 1KB

/4 Size: 4KB - Virtual size: 992B

/19 Size: 2.1MB - Virtual size: 2.1MB

/31 Size: 32KB - Virtual size: 30KB

/45 Size: 188KB - Virtual size: 185KB

/57 Size: 76KB - Virtual size: 73KB

/70 Size: 168KB - Virtual size: 164KB

/81 Size: 624KB - Virtual size: 622KB

/92 Size: 76KB - Virtual size: 73KB

.text
Size: 196KB - Virtual size: 194KB

.data
Size: 4KB - Virtual size: 368B

.rodata
Size: 4KB - Virtual size: 100B

.rdata
Size: 116KB - Virtual size: 115KB

.pdata
Size: 12KB - Virtual size: 8KB

.xdata
Size: 12KB - Virtual size: 10KB

.bss
Size: - Virtual size: 320B

.edata
Size: 68KB - Virtual size: 66KB

.idata
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 4KB - Virtual size: 1KB

/4
Size: 4KB - Virtual size: 992B

/19
Size: 2.1MB - Virtual size: 2.1MB

/31
Size: 32KB - Virtual size: 30KB

/45
Size: 188KB - Virtual size: 185KB

/57
Size: 76KB - Virtual size: 73KB

/70
Size: 168KB - Virtual size: 164KB

/81
Size: 624KB - Virtual size: 622KB

/92
Size: 76KB - Virtual size: 73KB