D3D12GetInterface
D3D12SDKVersion
Static task
static1
1 signatures
General
-
Target
D3D12Core.dll
-
Size
5.0MB
-
MD5
416667c38890f36c7bdd9ad1427f0d79
-
SHA1
2e68d82edc8ea4e9832934c96118e29c111c48da
-
SHA256
771e59c40dd706e4cb5b5374ef8d5ed9f4f603acf51fe29d2e42ac0c0cbc4234
-
SHA512
8b8cfd039de881127a3750eca8420d5501af467b30769cb007984de07a700e2672ed7f5119d9e6841b58abb7de844e05dd1b1f4ccb1a0f7c9be27e1c1511fd26
-
SSDEEP
49152:usQFTCsFJsv+3Wn5J6Uu1Pvpb0TNQTp7BJehNu+Egeq0SpVSQNcJ057UUGjWX:wT9sv+GWtTxTqAzd8
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource D3D12Core.dll
Files
-
D3D12Core.dll.dll windows x64
cdaf0a8af39c973c4a0e892b71e6b51d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
api-ms-win-core-debug-l1-1-0
DebugBreak
OutputDebugStringW
IsDebuggerPresent
OutputDebugStringA
api-ms-win-core-util-l1-1-0
DecodePointer
EncodePointer
api-ms-win-core-handle-l1-1-0
DuplicateHandle
CloseHandle
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
SetLastError
RaiseException
api-ms-win-core-heap-l1-1-0
HeapReAlloc
HeapAlloc
GetProcessHeap
HeapFree
HeapSize
api-ms-win-core-synch-l1-1-0
AcquireSRWLockShared
CreateMutexExW
CreateSemaphoreExW
ResetEvent
WaitForSingleObjectEx
ReleaseSRWLockExclusive
TryAcquireSRWLockShared
TryAcquireSRWLockExclusive
WaitForSingleObject
ReleaseMutex
ReleaseSemaphore
DeleteCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
LeaveCriticalSection
InitializeSRWLock
SetEvent
CreateEventA
EnterCriticalSection
CreateEventExW
OpenSemaphoreW
ReleaseSRWLockShared
AcquireSRWLockExclusive
InitializeCriticalSectionAndSpinCount
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
GetCurrentThread
GetExitCodeThread
SetThreadPriority
OpenProcessToken
GetCurrentProcess
TlsAlloc
GetStartupInfoW
SwitchToThread
CreateThread
GetCurrentProcessId
ExitProcess
TlsGetValue
TlsSetValue
ResumeThread
GetCurrentThreadId
ExitThread
TlsFree
FlushProcessWriteBuffers
api-ms-win-core-threadpool-l1-2-0
CreateThreadpoolWork
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolTimer
FreeLibraryWhenCallbackReturns
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWork
SubmitThreadpoolWork
SetThreadpoolTimer
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
api-ms-win-core-libraryloader-l1-2-0
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
FreeLibraryAndExitThread
LoadLibraryExA
GetModuleFileNameA
LoadLibraryExW
GetModuleHandleExW
GetProcAddress
api-ms-win-core-localization-l1-2-0
FormatMessageA
EnumSystemLocalesW
GetACP
FormatMessageW
LCMapStringEx
LCMapStringW
GetLocaleInfoEx
GetLocaleInfoW
GetCPInfo
GetUserDefaultLCID
IsValidLocale
IsValidCodePage
GetOEMCP
oleaut32
SysFreeString
api-ms-win-core-rtlsupport-l1-1-0
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlPcToFileHeader
RtlCaptureStackBackTrace
RtlUnwindEx
RtlUnwind
api-ms-win-core-apiquery-l2-1-0
IsApiSetImplemented
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
QueryPerformanceFrequency
api-ms-win-core-processthreads-l1-1-1
GetCurrentProcessorNumber
GetProcessMitigationPolicy
IsProcessorFeaturePresent
api-ms-win-core-sysinfo-l1-1-0
GetTickCount64
GetTickCount
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetSystemInfo
api-ms-win-core-memory-l1-1-0
VirtualQuery
VirtualProtect
MapViewOfFile
VirtualAlloc
UnmapViewOfFile
VirtualFree
api-ms-win-core-libraryloader-l1-2-1
LoadLibraryA
LoadLibraryW
api-ms-win-core-heap-l2-1-0
LocalFree
api-ms-win-core-string-l1-1-0
CompareStringW
GetStringTypeW
WideCharToMultiByte
CompareStringEx
MultiByteToWideChar
api-ms-win-core-psapi-l1-1-0
K32GetModuleInformation
api-ms-win-eventing-provider-l1-1-0
EventRegister
EventWriteTransfer
EventUnregister
EventSetInformation
api-ms-win-core-version-l1-1-0
GetFileVersionInfoExW
VerQueryValueW
GetFileVersionInfoSizeExW
api-ms-win-core-memory-l1-1-1
GetWriteWatch
api-ms-win-security-base-l1-1-0
PrivilegeCheck
AllocateLocallyUniqueId
api-ms-win-core-version-l1-1-1
GetFileVersionInfoSizeW
GetFileVersionInfoW
api-ms-win-core-registry-l1-1-0
RegEnumKeyExA
RegOpenKeyExW
RegOpenKeyExA
RegGetValueW
RegNotifyChangeKeyValue
RegQueryValueExA
RegCloseKey
api-ms-win-core-com-l1-1-0
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
api-ms-win-core-windowserrorreporting-l1-1-1
WerRegisterCustomMetadata
WerUnregisterCustomMetadata
api-ms-win-core-quirks-l1-1-0
QuirkIsEnabled
api-ms-win-core-sysinfo-l1-2-0
GetNativeSystemInfo
api-ms-win-core-file-l1-1-0
SetFileInformationByHandle
GetFileSize
CreateFileA
GetFileType
ReadFile
WriteFile
GetFileSizeEx
SetFilePointerEx
CreateFileW
GetFileTime
FlushFileBuffers
FindClose
FindFirstFileExW
FindNextFileW
api-ms-win-core-processthreads-l1-1-3
SetThreadDescription
user32
UnregisterClassA
api-ms-win-core-synch-l1-2-0
InitOnceExecuteOnce
SleepConditionVariableCS
InitializeConditionVariable
Sleep
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
api-ms-win-core-fibers-l1-1-0
FlsSetValue
FlsAlloc
FlsFree
FlsGetValue
api-ms-win-core-file-l2-1-0
GetFileInformationByHandleEx
CreateSymbolicLinkW
api-ms-win-core-interlocked-l1-1-0
InterlockedFlushSList
InterlockedPushEntrySList
InitializeSListHead
api-ms-win-core-processenvironment-l1-1-0
FreeEnvironmentStringsW
SetStdHandle
SetEnvironmentVariableW
GetStdHandle
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
api-ms-win-core-file-l1-2-0
GetTempPathW
api-ms-win-core-datetime-l1-1-0
GetTimeFormatW
GetDateFormatW
api-ms-win-core-console-l1-1-0
SetConsoleCtrlHandler
WriteConsoleW
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
api-ms-win-core-timezone-l1-1-0
GetTimeZoneInformation
Exports
Exports
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text_hf Size: 518KB - Virtual size: 518KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 118KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DDIData Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ