d3d10[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3d10.dll
Size

9.2MB
MD5

34e2d374bb09c1428b2e39167d0eee41
SHA1

2d19da8ed1ac7d33a3fa6faeb93ba5073f9b09c8
SHA256

c5b42e1efec024f9a15e312b5a2e3068ba751ff5f72e55d0372295c0c4fbd5cf
SHA512

1e28bae3b735020b776fe626f70d5035100086815c3ced47c258e70282bcab7aa51782c7a17ee75b741e340478b7b17a488c9d853434d67fd9e471306df4a754
SSDEEP

196608:tSPB9yMPsFnCU6R0dlCffVBFR/IS3nRkplGqixaoc7L3HN92BN66:W/0gU9fC3/IqeplGsoGL3H86

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3d10.dll

Files

d3d10.dll
.dll windows x64

85659b8921acce44321d44add3037a5a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

ntdll

VerSetConditionMask

user32

LoadCursorA
CharUpperBuffW

kernel32

GetSystemDirectoryA
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

imm32

ImmReleaseContext

d3dcompiler_47

D3DCompile

advapi32

CryptGetHashParam

normaliz

IdnToAscii

wldap32

ord143

crypt32

CertOpenStore

ws2_32

bind

shell32

ShellExecuteA

rpcrt4

UuidToStringA

psapi

GetModuleInformation

userenv

UnloadUserProfile

vcruntime140

__current_exception

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_beginthreadex

api-ms-win-crt-heap-l1-1-0

calloc

api-ms-win-crt-convert-l1-1-0

strtoll

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-math-l1-1-0

pow

api-ms-win-crt-string-l1-1-0

strcspn

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-filesystem-l1-1-0

_stat64

Sections

.text
Size: - Virtual size: 929KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 865KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.93R
Size: - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.^Q9
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.-it
Size: 9.2MB - Virtual size: 9.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 233B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

85659b8921acce44321d44add3037a5a

Headers

DLL Characteristics

File Characteristics

Imports

msvcp140

ntdll

user32

kernel32

imm32

d3dcompiler_47

advapi32

normaliz

wldap32

crypt32

ws2_32

shell32

rpcrt4

psapi

userenv

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

Sections

.text Size: - Virtual size: 929KB

.rdata Size: - Virtual size: 865KB

.data Size: - Virtual size: 16KB

.pdata Size: - Virtual size: 37KB

.93R Size: - Virtual size: 6.9MB

.^Q9 Size: 5KB - Virtual size: 4KB

.-it Size: 9.2MB - Virtual size: 9.2MB

.reloc Size: 512B - Virtual size: 200B

.rsrc Size: 512B - Virtual size: 233B

.text
Size: - Virtual size: 929KB

.rdata
Size: - Virtual size: 865KB

.data
Size: - Virtual size: 16KB

.pdata
Size: - Virtual size: 37KB

.93R
Size: - Virtual size: 6.9MB

.^Q9
Size: 5KB - Virtual size: 4KB

.-it
Size: 9.2MB - Virtual size: 9.2MB

.reloc
Size: 512B - Virtual size: 200B

.rsrc
Size: 512B - Virtual size: 233B