d:\work\VideoRender\branches\SuperRender_EagleEye_Old\bin\win32\Private_PDB32\EagleEyeRender.pdb
Static task
static1
Behavioral task
behavioral1
Sample
EagleEyeRender.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
EagleEyeRender.dll
Resource
win10v2004-20240508-en
General
-
Target
EagleEyeRender.dll
-
Size
401KB
-
MD5
44b73a0305018e29cc8ad8462bb7a872
-
SHA1
51e6d713536d31b5843acb6cfd751fe095ab938e
-
SHA256
938aafe5965797cc67280842c8015f6904d1d349efa3bc259ccfb16654e4fb8f
-
SHA512
3b82aa9b8bf56713fa7acbc3ccaf9ed8a0d141247f86f7ab28798abd985df75aa6357bd928174078f2ba3d45799398944c6432b68ca817287eb9aaf9c1dcbe97
-
SSDEEP
6144:OuebAFajYaBmNVfDF+JtXGLDE3OERNVZ0GG9NQJUG2nJF3clY:O397IDF+JtXGHE3OUNYGG9+JUn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EagleEyeRender.dll
Files
-
EagleEyeRender.dll.dll windows:5 windows x86 arch:x86
89893e8074dd5cf32fd25b7422e677f6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ddraw
DirectDrawEnumerateExA
DirectDrawCreateEx
kernel32
CompareStringW
CompareStringA
GetTimeZoneInformation
GetProcessHeap
SetEndOfFile
LCMapStringW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
CreateFileA
WriteConsoleW
GetCurrentThreadId
OutputDebugStringA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
Sleep
LoadLibraryA
GetProcAddress
GetVersionExA
LCMapStringA
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
SetFilePointer
GetLocaleInfoA
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
HeapAlloc
GetLastError
HeapFree
GetCommandLineA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
HeapSize
ExitProcess
FatalAppExitA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
WriteFile
GetStdHandle
GetModuleFileNameA
CloseHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
SetEnvironmentVariableA
user32
ChangeDisplaySettingsExA
EnumDisplaySettingsA
EnumDisplayDevicesA
GetClientRect
GetSystemMetrics
GetDesktopWindow
GetMonitorInfoA
ReleaseDC
GetDC
ClientToScreen
IsWindowVisible
IsWindow
OffsetRect
GetWindowRect
DrawTextA
gdi32
StretchDIBits
SetBkMode
SetTextColor
CreateFontA
CreatePen
MoveToEx
LineTo
GetDeviceCaps
GetSystemPaletteEntries
CreatePalette
GetNearestPaletteIndex
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
SetPixel
GetBitmapBits
DeleteDC
d3dx9_43
D3DXMatrixPerspectiveFovLH
D3DXCreateFontIndirectA
D3DXLoadSurfaceFromSurface
D3DXMatrixLookAtLH
D3DXMatrixRotationZ
D3DXCreateSprite
D3DXMatrixMultiply
D3DXMatrixRotationX
D3DXMatrixTranslation
D3DXSaveSurfaceToFileA
D3DXCompileShader
D3DXMatrixRotationY
D3DXCreateLine
d3d9
Direct3DCreate9
Exports
Exports
SR_AddSubPort
SR_Capture
SR_CreateHandle
SR_DelSubPort
SR_DestroyHandle
SR_Display
SR_DisplaySurface
SR_DisplaySurfaceEx
SR_DrawFont
SR_DrawLines
SR_DrawPolygon
SR_DrawRect
SR_GetCapability
SR_GetCaptureData
SR_GetConfig
SR_GetLastError
SR_GetPonitColor
SR_GetSDKVersion
SR_Init
SR_RegisterDisplayWnd
SR_RegisterListener
SR_Rotate
SR_SetCallBack
SR_SetConfig
SR_SetDisplayRect
SR_SetVerticalSyncPeriod
SR_UpdateFrameData
_SR_DrawCircle@24
_SR_DrawPixels@24
Sections
.text Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rodata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ