Static task
static1
Behavioral task
behavioral1
Sample
d3d11warp.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d3d11warp.dll
Resource
win10v2004-20230915-en
General
-
Target
d3d11warp.dll
-
Size
470KB
-
MD5
e78bf118edac618ce51be9f21187397b
-
SHA1
cce9d013718fc64e30df1e70b503ac37949f143a
-
SHA256
bc23f4f210f0556a47b4dff810ef6def31a238a9d60950b1c6b35546b22feb4f
-
SHA512
1fd19249142fc9b9449ebe9ce681c24f8ee6c55892403cbbdb3561dc2f6e4187584f96c75ed92dc745f6e8fede2655c0aa9990abf12c37c1c70afe9d21bb02d9
-
SSDEEP
12288:VpRcFsHcFLJtySfBTT3iXhxkCRQRxx6rjZ:PGF+WS+BTTikCqq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3d11warp.dll
Files
-
d3d11warp.dll.dll windows:6 windows x64
69e196fe835e6778845be8164b2c3b00
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetModuleHandleA
user32
UpdateWindow
GetMenu
msvcp140
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
dwmapi
DwmExtendFrameIntoClientArea
d3d11
D3D11CreateDeviceAndSwapChain
imm32
ImmGetContext
d3dcompiler_47
D3DCompile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_terminate
api-ms-win-crt-heap-l1-1-0
malloc
api-ms-win-crt-stdio-l1-1-0
ftell
api-ms-win-crt-string-l1-1-0
strcmp
api-ms-win-crt-runtime-l1-1-0
system
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-convert-l1-1-0
atof
api-ms-win-crt-math-l1-1-0
ceilf
shell32
SHGetDiskFreeSpaceA
advapi32
RegQueryValueA
Sections
Size: - Virtual size: 326KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
Size: - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE