example_win32_directx9[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

example_win32_directx9.exe
Size

1.4MB
MD5

7ce1e234b42934a84361e8ec0ffd6aaa
SHA1

fe2fe0d249bac8757d5d1243687ebb88f216f497
SHA256

87b9bda379b7be44abdcb05660ee884e6c32df46540017f3df7c0cacfba667be
SHA512

45e9fafce942b5a4df31f8bd949ad9459c462642551a572641927f9019c4bb705f294ee92a2fddde68ec475e66860472a20dbd5470a21227b82a7709bc2a31a0
SSDEEP

24576:uYSo9hO0nN9QdasS+kzxocWbnw0GcV734uajOmHZJLJ2wVatE:fznfQdasS+tcoGuajjHZJAwVoE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
example_win32_directx9.exe

Files

example_win32_directx9.exe
.exe windows:6 windows x64 arch:x64

43da05ea9dd493c5fe166f01cd8ab2a7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\EfialDa3RD\Desktop\Sources\Menu\examples\example_win32_directx9\Release\example_win32_directx9.pdb

Imports

d3d9

Direct3DCreate9

kernel32

LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GlobalUnlock
RtlVirtualUnwind
RtlLookupFunctionEntry
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
SleepConditionVariableSRW
WideCharToMultiByte
GlobalLock
GlobalFree
MultiByteToWideChar
GlobalAlloc
AcquireSRWLockExclusive
IsDebuggerPresent
ReleaseSRWLockExclusive
WakeAllConditionVariable

user32

PeekMessageW
DispatchMessageW
ShowWindow
RegisterClassExW
UnregisterClassW
CreateWindowExW
DestroyWindow
DefWindowProcW
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
PostQuitMessage
UpdateWindow
GetKeyState
GetForegroundWindow
LoadCursorW
SetCapture
SetCursor
GetClientRect
IsWindowUnicode
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
TranslateMessage

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow

d3dx9_43

D3DXCreateTextureFromFileInMemoryEx

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler
_CxxThrowException
memmove
__current_exception
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
memchr
memcmp
__current_exception_context
memcpy
memset

api-ms-win-crt-stdio-l1-1-0

fwrite
__stdio_common_vfprintf
fseek
fclose
fflush
__p__commode
_set_fmode
ftell
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
__acrt_iob_func

api-ms-win-crt-string-l1-1-0

strncpy
strcpy_s
strncmp
strcmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_callnewh
malloc
free

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_cexit
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
_crt_atexit
_c_exit
_register_thread_local_exe_atexit_callback
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
terminate
_invalid_parameter_noinfo_noreturn
_wassert
_seh_filter_exe
__p___argv

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-math-l1-1-0

sqrtf
acosf
ceilf
fmodf
sinf
cosf
__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 976KB - Virtual size: 977KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43da05ea9dd493c5fe166f01cd8ab2a7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d9

kernel32

user32

msvcp140

imm32

d3dx9_43

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 312KB - Virtual size: 312KB

.rdata Size: 86KB - Virtual size: 85KB

.data Size: 976KB - Virtual size: 977KB

.pdata Size: 13KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 812B

.text
Size: 312KB - Virtual size: 312KB

.rdata
Size: 86KB - Virtual size: 85KB

.data
Size: 976KB - Virtual size: 977KB

.pdata
Size: 13KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 812B