E:\Project Bo4\SOURCE CODE\shield-development\build\bin\x64\Debug\d3d11.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d3d11.dll
Resource
win11-20240412-en
General
-
Target
d3d11.dll
-
Size
6.0MB
-
MD5
a73ddabd6ed309c81291640a69bf80b2
-
SHA1
dd6a4a6d3ecfe8956330a8aa026cb8e393f8a2b5
-
SHA256
0353f2cee60f69bf90b35bad443cce78f12797c4159f3081878818a113a200dc
-
SHA512
a472449045a35c974d352d96b414511975715f04f45238ac2078d1a6e50db7345d5bb3e3e2d25b57b41c9822d5016bcc106fdb59120f1078be70bc59bd93d212
-
SSDEEP
49152:BPW47Q3SKmJ6HPdsYK3YDh2n1AHa/yqvShpPg5BhC6GyBd/B3kDWvJ4+Ugp1LF1p:murILHyBjWua
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3d11.dll
Files
-
d3d11.dll.dll windows:6 windows x64 arch:x64
edd2d327bfd0b944ddf3c5ae4c9ccd78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetSystemDirectoryA
DecodePointer
GetLastError
SetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
MultiByteToWideChar
IsBadReadPtr
GetCurrentThreadId
SetUnhandledExceptionFilter
RtlUnwind
SetThreadContext
GetThreadContext
RtlCaptureStackBackTrace
HeapCreate
GetTickCount
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetProcAddress
CreateThread
GetCurrentProcessId
SetEndOfFile
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleW
SetFilePointerEx
InitializeCriticalSection
OutputDebugStringA
TerminateProcess
GetCurrentProcess
HeapDestroy
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
CreateProcessA
VirtualProtect
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
LoadResource
LockResource
SizeofResource
LoadLibraryA
FindResourceA
FlushInstructionCache
VirtualAlloc
VirtualFree
GlobalUnlock
GlobalLock
GetCurrentThread
OpenThread
SuspendThread
ResumeThread
GetThreadId
CreateToolhelp32Snapshot
Thread32First
Thread32Next
CreateFileA
FlushFileBuffers
ReadFile
SetFilePointer
GetTempPathA
GetTempFileNameA
VirtualQuery
DeleteFileA
MoveFileA
GetSystemFirmwareTable
IsDebuggerPresent
OutputDebugStringW
RaiseException
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetFullPathNameW
SetFileAttributesW
SetFileInformationByHandle
SetFileTime
GetTempPathW
AreFileApisANSI
DeviceIoControl
GetModuleHandleW
CreateDirectoryExW
CopyFileW
MoveFileExW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
WideCharToMultiByte
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
LocalFree
FormatMessageA
GetLocaleInfoEx
InitOnceBeginInitialize
InitOnceComplete
WaitForSingleObjectEx
Sleep
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
InitOnceExecuteOnce
ReleaseSRWLockShared
AcquireSRWLockShared
TryAcquireSRWLockShared
LoadLibraryExW
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
EncodePointer
LCMapStringEx
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
CompareStringEx
GetCPInfo
GetStringTypeW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
HeapAlloc
HeapFree
GetProcessHeap
RtlPcToFileHeader
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
HeapSize
HeapValidate
GetSystemInfo
GetStdHandle
GetFileType
WriteConsoleW
ExitThread
FreeLibraryAndExitThread
ExitProcess
WriteFile
SetConsoleCtrlHandler
HeapReAlloc
HeapQueryInformation
GetTimeZoneInformation
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
CreateMutexExA
user32
GetWindowTextA
GetAsyncKeyState
TranslateMessage
MessageBoxA
ShowCursor
GetWindowTextW
DispatchMessageW
LoadIconA
LoadCursorA
AdjustWindowRect
GetWindowRect
UpdateWindow
GetSystemMetrics
SetWindowPos
ShowWindow
DestroyWindow
IsWindow
OpenClipboard
CloseClipboard
GetClipboardData
CreateWindowExA
UnregisterClassA
RegisterClassA
PostQuitMessage
DefWindowProcA
SendMessageA
PeekMessageW
gdi32
CreateBitmap
DeleteObject
advapi32
CryptAcquireContextW
RegOpenKeyExW
RegCloseKey
GetUserNameA
RegQueryValueExW
CryptReleaseContext
CryptAcquireContextA
CryptGenRandom
shell32
ShellExecuteA
ws2_32
htons
gethostbyname
getaddrinfo
freeaddrinfo
inet_pton
dbghelp
MiniDumpWriteDump
Exports
Exports
D3D11CreateDevice
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 282KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
memcpy_ Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ