D:\Development\DDrawCompat\Release\ddraw.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ddraw.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ddraw.dll
Resource
win10v2004-20240226-en
General
-
Target
ddraw.dll
-
Size
2.6MB
-
MD5
b6fb50cdeaa3b4ffe7278ed83b55ce3b
-
SHA1
08f33616e3300deb208cd69640515cf7d4bcc6d7
-
SHA256
7611747c6383023df64559e4e52ae44cf1ca5329238ed1f63e25172f89d8c9fa
-
SHA512
d77ccdd8859cb9f0600181761c6f482bc000dea9201c327d82b5895bcda9a979a68003d68ee9d1ecbb652d4c38467e22d4d9cddbed43f4d7e8556c9908236491
-
SSDEEP
49152:sBKUmynO7BlUKwDXe7QWtqXmITQ28P1gS:sBPmynAw7aQWtgmKQ2o1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddraw.dll
Files
-
ddraw.dll.dll windows:6 windows x86 arch:x86
687ab7729ee850af5e32b3924a7171f6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
dwmapi
ord102
DwmSetWindowAttribute
DwmIsCompositionEnabled
imm32
ImmDisableIME
msimg32
TransparentBlt
GradientFill
AlphaBlend
uxtheme
SetThemeAppProperties
winmm
timeEndPeriod
timeBeginPeriod
kernel32
FindClose
FindFirstFileExW
FindNextFileW
GetLocaleInfoEx
AreFileApisANSI
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionEx
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
InitializeSListHead
UnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
HeapReAlloc
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
LocalFree
IsValidCodePage
GetVersionExW
GetVersionExA
GetVersion
SetProcessAffinityMask
GetProcessAffinityMask
GetLogicalProcessorInformation
SetProcessPriorityBoost
lstrcmpiW
lstrcmpiA
GlobalMemoryStatus
GetDiskFreeSpaceW
OpenEventW
SetEvent
MulDiv
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetModuleHandleExW
SetThreadPriorityBoost
GetEnvironmentVariableA
GetModuleHandleW
TerminateProcess
SetUnhandledExceptionFilter
CloseHandle
CreateFileW
SetLastError
GetLastError
VerifyVersionInfoW
GetThreadPriority
SetThreadPriority
GetCurrentThread
GetCurrentProcessId
VerSetConditionMask
GetProcessHeap
HeapFree
HeapAlloc
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
QueryPerformanceCounter
CreateWaitableTimerA
Sleep
SetWaitableTimer
WaitForSingleObject
QueryPerformanceFrequency
GetModuleFileNameW
GetSystemDirectoryW
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleExA
GetModuleHandleA
FreeLibrary
VirtualProtect
VirtualAlloc
FlushInstructionCache
GetCurrentProcess
GetLocalTime
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
WideCharToMultiByte
SetStdHandle
WriteConsoleW
SetEndOfFile
FormatMessageA
user32
GetMonitorInfoW
MonitorFromWindow
EnumDisplaySettingsExW
EnumDisplaySettingsExA
EnumDisplaySettingsA
ChangeDisplaySettingsExW
ChangeDisplaySettingsExA
ShowWindow
GetGuiResources
KillTimer
SetTimer
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowsHookExA
SendInput
GetParent
SetWindowLongW
GetWindowLongW
MessageBoxIndirectW
MessageBoxIndirectA
MessageBoxExW
MessageBoxExA
MessageBoxW
MessageBoxA
SetMenuInfo
GetMenuInfo
IsWindowUnicode
DialogBoxIndirectParamW
DialogBoxIndirectParamA
DialogBoxParamW
DialogBoxParamA
CreateDialogIndirectParamW
CreateDialogIndirectParamA
CreateDialogParamW
CreateDialogParamA
AnimateWindow
CallWindowProcW
SendNotifyMessageW
SendMessageW
PeekMessageW
PeekMessageA
GetMessageW
GetWindowRgn
GetUpdateRgn
SetProcessDPIAware
UnionRect
GetSysColorBrush
IsZoomed
ScrollWindowEx
ScrollWindow
GetScrollBarInfo
PtInRect
GetKeyState
GetMessagePos
GetActiveWindow
IsChild
GetAncestor
GetWindow
GetClassNameA
GetClientRect
GetScrollPos
InvalidateRect
EndPaint
BeginPaint
SetMenuItemInfoW
DefDlgProcW
DefDlgProcA
GetClassInfoW
GetClassInfoA
CallWindowProcA
DefWindowProcW
SetLayeredWindowAttributes
GetSystemMetrics
CopyIcon
CreateIconIndirect
LoadImageW
LoadImageA
CreateIconFromResourceEx
CreateIconFromResource
CreateIcon
PrivateExtractIconsW
PrivateExtractIconsA
LoadIconW
LoadIconA
LoadCursorFromFileW
LoadCursorFromFileA
LoadCursorW
LoadCursorA
RegisterClassExW
RegisterClassExA
IsProcessDPIAware
EnumDisplayMonitors
IsWindow
SendNotifyMessageA
RegisterClassW
EnumChildWindows
SetWindowRgn
RegisterClassA
DefWindowProcA
PostMessageA
SendMessageTimeoutA
DispatchMessageA
TranslateMessage
GetMessageA
GetWindowInfo
InvertRect
FrameRect
FillRect
DrawFocusRect
ScrollDC
PaintDesktop
TabbedTextOutW
TabbedTextOutA
DrawStateW
DrawStateA
GrayStringW
GrayStringA
DrawTextExW
DrawTextExA
DrawTextW
DrawTextA
DrawIcon
SendMessageA
DrawCaption
DrawFrameControl
DrawEdge
GetDesktopWindow
GetGUIThreadInfo
SetWinEventHook
GetCaretBlinkTime
EnumWindows
SetClassLongA
GetClassLongA
ClientToScreen
RedrawWindow
WindowFromDC
CreateWindowExA
DisableProcessWindowsGhosting
SystemParametersInfoW
SystemParametersInfoA
GetCursorInfo
CreateCursor
ClipCursor
GetCursor
GetClipCursor
GetCursorPos
SetCursor
SetCursorPos
SetWindowLongA
GetWindowLongA
GetDC
GetWindowThreadProcessId
GetForegroundWindow
IsIconic
IsWindowVisible
SetWindowPos
GetDCEx
GetIconInfo
DrawIconEx
CopyImage
DestroyCursor
EqualRect
IsRectEmpty
IntersectRect
InflateRect
ReleaseDC
GetWindowDC
GetLayeredWindowAttributes
GetMonitorInfoA
MonitorFromPoint
OffsetRect
GetWindowRect
gdi32
GetTextColor
GetTextAlign
GetTextCharacterExtra
GetStretchBltMode
GetStockObject
GetPolyFillMode
GetMapMode
GetGraphicsMode
GetCurrentPositionEx
GetClipRgn
GetBrushOrgEx
GetBkMode
GetDCPenColor
GetDCBrushColor
GetBkColor
GetROP2
PatBlt
OffsetRgn
GetObjectType
GetDeviceCaps
SelectObject
GetCurrentObject
CreateFontIndirectA
SetPaletteEntries
SelectPalette
ResizePalette
RealizePalette
CreatePalette
GetRegionData
GetRandomRgn
ExtCreateRegion
GetObjectA
DeleteObject
BitBlt
D3DKMTSetQueuedLimit
D3DKMTGetScanLine
D3DKMTCreateDCFromMemory
D3DKMTSetGammaRamp
D3DKMTSetVidPnSourceOwner
D3DKMTCloseAdapter
D3DKMTOpenAdapterFromHdc
D3DKMTQueryAdapterInfo
D3DKMTPresent
D3DKMTCreateDevice
DeleteDC
CreateDCA
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
GetWorldTransform
SetWorldTransform
SetArcDirection
GetArcDirection
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetBrushOrgEx
GetViewportExtEx
Arc
Chord
CreateBitmap
CreateBitmapIndirect
CreateCompatibleBitmap
CreateDiscardableBitmap
CreateDIBitmap
DrawEscape
Ellipse
ExtFloodFill
FillRgn
FrameRgn
GetPixel
InvertRgn
LineTo
MaskBlt
PlgBlt
Pie
PaintRgn
PolyPolygon
Rectangle
RoundRect
SetBitmapBits
SetDIBits
SetDIBitsToDevice
SetPixel
SetPixelV
StretchBlt
StretchDIBits
GdiAlphaBlend
GdiTransparentBlt
GdiGradientFill
AngleArc
PolyPolyline
ArcTo
PolyDraw
TextOutA
TextOutW
ExtTextOutA
ExtTextOutW
PolyTextOutA
PolyTextOutW
LPtoDP
Polygon
Polyline
PolyBezier
PolyBezierTo
PolylineTo
GetPaletteEntries
GetSystemPaletteEntries
GetSystemPaletteUse
SetSystemPaletteUse
UnrealizeObject
CombineRgn
CreateRectRgn
CreateRectRgnIndirect
SetRectRgn
CreateCompatibleDC
CreateDIBSection
SetDIBColorTable
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetMetaRgn
SetBkColor
SetDCBrushColor
SetDCPenColor
SetBkMode
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
GetDCOrgEx
D3DKMTReleaseProcessVidPnSourceOwners
SetPolyFillMode
advapi32
RegGetValueW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyTransactedW
RegOpenKeyTransactedA
RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyW
RegOpenKeyA
RegCreateKeyTransactedW
RegCreateKeyTransactedA
RegCreateKeyExW
RegCreateKeyExA
RegCreateKeyW
RegCreateKeyA
RegCloseKey
RegGetValueA
ole32
CoCreateInstance
CoInitializeEx
StringFromGUID2
Exports
Exports
AcquireDDThreadLock
CompleteCreateSysmemSurface
D3DParseUnknownCommand
DCIBeginAccess
DCICloseProvider
DCICreateOffscreen
DCICreateOverlay
DCICreatePrimary
DCIDestroy
DCIDraw
DCIEndAccess
DCIEnum
DCIOpenProvider
DCISetClipList
DCISetDestination
DCISetSrcDestClip
DDGetAttachedSurfaceLcl
DDInternalLock
DDInternalUnlock
DSoundHelp
DirectDrawCreate
DirectDrawCreateClipper
DirectDrawCreateEx
DirectDrawEnumerateA
DirectDrawEnumerateExA
DirectDrawEnumerateExW
DirectDrawEnumerateW
DllCanUnloadNow
DllGetClassObject
GetDCRegionData
GetDDSurfaceLocal
GetOLEThunkData
GetSurfaceFromDC
GetWindowRegionData
RegisterSpecialCase
ReleaseDDThreadLock
SetAppCompatData
WinWatchClose
WinWatchDidStatusChange
WinWatchGetClipList
WinWatchNotify
WinWatchOpen
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 301KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 185KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ