d3d10.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d3d10.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
d3d10.dll
Resource
win10v2004-20240508-en
General
-
Target
d3d10.dll
-
Size
1.0MB
-
MD5
8504944851df6175cc489a8f3328459e
-
SHA1
f7d49575fa03c1a673909e7cd37250930a2ac6a1
-
SHA256
ddc2f6dba537e188de53ebfdc5cc943f1468eafc9fb3000929ce75072454bf9e
-
SHA512
8dba2bc4eb481cff552b3911ae7d6103ccdb99e98719a3f512aa87929f57dd6d5d4fb7e381fe57a486289afb85ef65d44d5d426befc040c6137ed6e3e12b7bff
-
SSDEEP
24576:7beqPe6t7VqyhCqYt5sbb+hmxc8pTl7i4MHbqpgBI:ZD3qyit5sgI9MH2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3d10.dll
Files
-
d3d10.dll.dll windows:6 windows x86 arch:x86
519cb4ecfc8cb487a686e61ecaf388c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
d3d10core
D3D10CoreGetVersion
D3D10CoreRegisterLayers
D3D10CoreCreateDevice
msvcrt
_except_handler4_common
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
strstr
modf
memmove
isalnum
isxdigit
atof
free
setlocale
malloc
memcpy
memcmp
floor
_purecall
_strdup
_strnicmp
_fpclass
_isnan
ceil
_stricmp
isalpha
atoi
isdigit
tolower
_finite
strchr
_clearfp
_controlfp
??2@YAPAXI@Z
??3@YAXPAX@Z
_vsnprintf
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CxxThrowException
__CxxFrameHandler3
_ftol2
_ftol2_sse
memset
kernel32
UnmapViewOfFile
GetSystemInfo
VirtualAlloc
VirtualFree
LeaveCriticalSection
DeleteCriticalSection
GetFullPathNameA
CloseHandle
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
EnterCriticalSection
GetFileSize
CreateFileA
InterlockedDecrement
InterlockedIncrement
FreeLibrary
LoadLibraryExW
MultiByteToWideChar
GetProcAddress
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleA
OutputDebugStringA
InterlockedCompareExchange
Sleep
InitializeCriticalSection
InterlockedExchange
advapi32
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
dxgi
CreateDXGIFactory
ntdll
WinSqmIsOptedIn
WinSqmAddToStreamEx
d3d11
D3D11CreateDeviceAndSwapChain
gdi32
DeleteObject
Exports
Exports
D3D10CompileEffectFromMemory
D3D10CompileShader
D3D10CreateBlob
D3D10CreateDevice
D3D10CreateDeviceAndSwapChain
D3D10CreateEffectFromMemory
D3D10CreateEffectPoolFromMemory
D3D10CreateStateBlock
D3D10DisassembleEffect
D3D10DisassembleShader
D3D10GetGeometryShaderProfile
D3D10GetInputAndOutputSignatureBlob
D3D10GetInputSignatureBlob
D3D10GetOutputSignatureBlob
D3D10GetPixelShaderProfile
D3D10GetShaderDebugInfo
D3D10GetVersion
D3D10GetVertexShaderProfile
D3D10PreprocessShader
D3D10ReflectShader
D3D10RegisterLayers
D3D10StateBlockMaskDifference
D3D10StateBlockMaskDisableAll
D3D10StateBlockMaskDisableCapture
D3D10StateBlockMaskEnableAll
D3D10StateBlockMaskEnableCapture
D3D10StateBlockMaskGetSetting
D3D10StateBlockMaskIntersect
D3D10StateBlockMaskUnion
RevertToOldImplementation
Sections
.text Size: 965KB - Virtual size: 965KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ