gdi32full[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

gdi32full.dll
Size

911KB
MD5

1a3963ee81643eb9a05e26c384c93e1c
SHA1

db09a82cfbbd00f5fbeb718c6f72683139b0a217
SHA256

ce591365f02c397294f703b2469f1d79c69abaf0d1dc44b15e2368c29ee84510
SHA512

1413b04357c44af321f600b03ab544d8b1710368e4b4f3a5258e3858bcaa2b6c8db3b22a314617173cbea9d1b6433228afb90768263c178a13fae47a3501870f
SSDEEP

24576:BDKBmkKm5aBBxUxSfzX5qH76lTcbgvvtj0yPO4:BDKcmABbUxyX1cAF0y/

Score

1^/10

Malware Config

Signatures

Files

gdi32full.dll
.dll windows:10 windows x86 arch:x86

5f8d4a81bd3b22f1d106d948eb4bcfce

Code Sign

33:00:00:04:5f:f3:c9:6c:1a:7f:f7:da:1d:00:00:00:00:04:5f
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:20

Not After

14/11/2024, 19:20

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c3:82:b3:ce:68:68:9b:91:e4:e6:1d:c7:02:3a:a5:58:e4:85:89:cd:80:6d:0e:00:d1:a5:09:fe:66:70:20:49
Signer

Actual PE Digest

c3:82:b3:ce:68:68:9b:91:e4:e6:1d:c7:02:3a:a5:58:e4:85:89:cd:80:6d:0e:00:d1:a5:09:fe:66:70:20:49

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

wgdi32full.pdb

Imports

msvcp_win

?_Xlength_error@std@@YAXPBD@Z
?_Random_device@std@@YAIXZ

api-ms-win-crt-string-l1-1-0

strncpy
wcsnlen
strnlen
memset

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__stricmp
_o__strnicmp
_o__wcsicmp
_o__wcsnicmp
_o_ceil
_o_floor
memmove
_o_free
_o_malloc
_o_toupper
_o_wcscpy_s
_except_handler4_common
_o__errno
_CxxThrowException
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
__std_terminate
__CxxFrameHandler3
wcschr
wcsrchr
_o__execute_onexit_table
memcmp
memcpy

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-localization-l1-2-0

GetACP
GetUserDefaultLCID
GetLocaleInfoW
FormatMessageW
ConvertDefaultLocale
IsValidLocale
GetOEMCP
IsDBCSLeadByte
IsDBCSLeadByteEx

api-ms-win-core-heap-l2-1-0

LocalReAlloc
GlobalFree
LocalFree
GlobalAlloc
LocalAlloc

api-ms-win-core-rtlsupport-l1-2-0

RtlCompareMemory
RtlRaiseException

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExA
GetModuleFileNameW
LockResource
GetProcAddress
SizeofResource
FindResourceExW
LoadLibraryExW
FreeLibrary
GetModuleHandleExW
GetModuleFileNameA
GetModuleHandleW
LoadResource

api-ms-win-core-sysinfo-l1-1-0

GetLocalTime
GetSystemWindowsDirectoryW
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
GetWindowsDirectoryW

api-ms-win-core-memory-l1-1-1

VirtualUnlock

api-ms-win-core-errorhandling-l1-1-0

SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
EventProviderEnabled

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW
SearchPathW

api-ms-win-core-file-l1-1-0

GetFullPathNameW
WriteFile
DeleteFileW
GetFileSizeEx
SetFilePointer
CreateFileW
GetDriveTypeW
SetFilePointerEx
GetTempFileNameW
ReadFile

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-registry-l1-1-0

RegGetValueW
RegQueryValueExW
RegEnumValueW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-file-l2-1-0

CopyFileExW

api-ms-win-core-memory-l1-1-0

MapViewOfFile
CreateFileMappingW
UnmapViewOfFile

api-ms-win-core-synch-l1-1-0

InitializeCriticalSection
InitializeSRWLock
InitializeCriticalSectionAndSpinCount
CreateEventA
DeleteCriticalSection
AcquireSRWLockShared
CreateMutexExW
ReleaseSRWLockShared
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
ReleaseMutex
WaitForSingleObject
InitializeCriticalSectionEx
LeaveCriticalSection
ReleaseSemaphore
EnterCriticalSection
CreateSemaphoreExW
SetEvent

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapSize
HeapAlloc
HeapFree

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

GetCurrentThread
TlsSetValue
GetCurrentThreadId
TlsAlloc
GetCurrentProcessId
ProcessIdToSessionId
GetCurrentProcess
TlsGetValue
TlsFree
TerminateProcess

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-string-l2-1-0

CharLowerBuffW

api-ms-win-security-base-l1-1-0

GetSidSubAuthorityCount
GetSidSubAuthority

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce
Sleep

api-ms-win-core-version-l1-1-1

GetFileVersionInfoW
GetFileVersionInfoSizeW

api-ms-win-core-version-l1-1-0

VerQueryValueW

api-ms-win-core-wow64-l1-1-1

IsWow64Process2

api-ms-win-core-psapi-l1-1-0

K32GetModuleBaseNameW
K32EnumProcessModulesEx
K32GetModuleInformation

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-kernel32-legacy-l1-1-0

MulDiv

api-ms-win-core-heap-obsolete-l1-1-0

GlobalSize
GlobalUnlock
GlobalLock

api-ms-win-core-string-obsolete-l1-1-0

lstrlenA
lstrlenW
lstrcmpiW

api-ms-win-core-stringansi-l1-1-0

CharUpperBuffA

gdi32

g_systemCallFilterId
CloseFigure
CreateDCA
CreateRectRgn
EndDoc
EndPage
EndPath
ExtTextOutA
ExtTextOutW
FillPath
GetClipBox
GetDeviceCaps
GetFontData
GetRegionData
GetRgnBox
GetTextMetricsA
IntersectClipRect
LineTo
MoveToEx
PolyBezierTo
Rectangle
RestoreDC
SaveDC
SelectClipPath
SelectClipRgn
SelectObject
SetBkMode
SetPolyFillMode
SetStretchBltMode
SetTextAlign
SetTextColor
SetWorldTransform
StartDocW
StartPage
StretchDIBits
pGdiSharedMemory
PolylineTo
PolyDraw
StrokePath
SetMiterLimit
InternalDeleteDC
CreateDCW
AbortDoc
Escape
SetICMMode
CreateScalableFontResourceW
RemoveFontResourceW
LpkGetEditControl
ghICM
DxTrimNotificationListHead
semDxTrimNotification
LpkpInitializeEditControl
DeleteDC
BeginPath
GdiBatchLimit
ExtSelectClipRgn
hGetPEBHandle
vSetPldc
bCreateDCW
bDeleteLDC
ExtEscape
fpClosePrinter
pGdiDevCaps
pldcGet
gW32PID
GdiGetEntry
gMaxGdiHandleCount
pGdiSharedHandleTable
GdiSetLastError
DeleteObject

api-ms-win-core-windowserrorreporting-l1-1-0

WerRegisterMemoryBlock

ntdll

NtCreateSection
NtQueryInformationFile
NtOpenFile
RtlDosPathNameToNtPathName_U
RtlDeleteCriticalSection
RtlInitializeCriticalSection
NtUnmapViewOfSection
NtMapViewOfSection
RtlpEnsureBufferSize
RtlNtPathNameToDosPathName
RtlNtStatusToDosError
NtOpenThreadToken
NtOpenProcessToken
NtQueryInformationToken
RtlQueryActivationContextApplicationSettings
NtQuerySystemInformation
NtQueryInformationProcess
TpSimpleTryPost
RtlLengthSid
NtRequestWaitReplyPort
RtlCopySid
NtSecureConnectPort
TpCallbackSetEventOnCompletion
NtRegisterThreadTerminatePort
RtlCaptureStackBackTrace
LdrFindResourceEx_U
LdrAccessResource
RtlEnterCriticalSection
RtlLeaveCriticalSection
RtlAllocateHeap
RtlFreeHeap
RtlUnicodeToMultiByteSize
RtlUnicodeToMultiByteN
NtVdmControl
RtlEncodePointer
RtlDecodePointer
RtlCreateUnicodeStringFromAsciiz
RtlFreeUnicodeString
RtlMultiByteToUnicodeN
RtlInitUnicodeString
NtOpenKey
NtQueryValueKey
NtClose

user32

GetWindowLongW
InflateRect
SendMessageW
GetSystemMetrics
MessageBeep
CreateCaret
GetKeyboardLayoutList
GetKeyboardLayout
SendMessageA
SetWindowLongW
CheckMenuItem
GetClientRect
EnableMenuItem
InvalidateRect
SetProcessDefaultLayout
CharUpperW
GetSysColor
SetRect
GetGuiResources
GetActiveWindow
DispatchMessageW
PeekMessageW
MsgWaitForMultipleObjectsEx
TranslateMessage
PostQuitMessage
IntersectRect
IsThreadDesktopComposited
GetAppCompatFlags2
GetThreadDpiAwarenessContext
ord2713
GetDC
ReleaseDC
GetWindowRect
InitializeLpkHooks
GetAppCompatFlags
UserRealizePalette

win32u

NtGdiCreateBitmapFromDxSurface2
NtGdiCreateBitmapFromDxSurface
NtGdiCreateClientObj
NtGdiCreateColorSpace
NtGdiCreateColorTransform
NtGdiCreateCompatibleBitmap
NtGdiCreateCompatibleDC
NtGdiCreateDIBBrush
NtGdiCreateDIBSection
NtGdiCreateDIBitmapInternal
NtGdiCreateEllipticRgn
NtGdiCreateHatchBrushInternal
NtGdiCreateMetafileDC
NtGdiCreateOPMProtectedOutput
NtGdiCreateOPMProtectedOutputs
NtGdiCreatePaletteInternal
NtGdiCreatePatternBrushInternal
NtGdiCreatePen
NtGdiCreateRectRgn
NtGdiCreateRoundRectRgn
NtGdiCreateServerMetaFile
NtGdiCreateSessionMappedDIBSection
NtGdiCreateSolidBrush
NtGdiDDCCIGetCapabilitiesString
NtGdiDDCCIGetCapabilitiesStringLength
NtGdiDDCCIGetTimingReport
NtGdiDDCCIGetVCPFeature
NtGdiDDCCISaveCurrentSettings
NtGdiDDCCISetVCPFeature
NtGdiDdCreateFullscreenSprite
NtGdiDdDestroyFullscreenSprite
NtGdiDdNotifyFullscreenSpriteUpdate
NtGdiDdQueryVisRgnUniqueness
NtGdiDeleteClientObj
NtGdiDeleteColorSpace
NtGdiDeleteColorTransform
NtGdiDeleteObjectApp
NtGdiDescribePixelFormat
NtGdiDestroyOPMProtectedOutput
NtGdiDestroyPhysicalMonitor
NtGdiDoBanding
NtGdiDoPalette
NtGdiDrawEscape
NtGdiDrawStream
NtGdiDwmCreatedBitmapRemotingOutput
NtGdiEllipse
NtGdiEnableEudc
NtGdiEndDoc
NtGdiEndGdiRendering
NtGdiEndPage
NtGdiEndPath
NtGdiEngAlphaBlend
NtGdiEngAssociateSurface
NtGdiEngBitBlt
NtGdiEngCheckAbort
NtGdiEngComputeGlyphSet
NtGdiEngCopyBits
NtGdiEngCreateClip
NtGdiEngDeleteClip
NtGdiEngDeletePath
NtGdiEngEraseSurface
NtGdiEngFillPath
NtGdiEngGradientFill
NtGdiEngLineTo
NtGdiEngLockSurface
NtGdiEngMarkBandingSurface
NtGdiEngPaint
NtGdiEngPlgBlt
NtGdiEngStretchBlt
NtGdiEngStretchBltROP
NtGdiEngStrokeAndFillPath
NtGdiEngStrokePath
NtGdiEngTextOut
NtGdiEngTransparentBlt
NtGdiEngUnlockSurface
NtGdiEnsureDpiDepDefaultGuiFontForPlateau
NtGdiEnumFonts
NtGdiEnumObjects
NtGdiEqualRgn
NtGdiEudcLoadUnloadLink
NtGdiExcludeClipRect
NtGdiExtCreatePen
NtGdiExtCreateRegion
NtGdiExtEscape
NtGdiExtFloodFill
NtGdiExtGetObjectW
NtGdiExtSelectClipRgn
NtGdiExtTextOutW
NtGdiFONTOBJ_cGetAllGlyphHandles
NtGdiFONTOBJ_cGetGlyphs
NtGdiFONTOBJ_pQueryGlyphAttrs
NtGdiFONTOBJ_pfdg
NtGdiFONTOBJ_pifi
NtGdiFONTOBJ_pvTrueTypeFontFile
NtGdiFONTOBJ_pxoGetXform
NtGdiFONTOBJ_vGetInfo
NtGdiFillPath
NtGdiFillRgn
NtGdiFlattenPath
NtGdiFlush
NtGdiFontIsLinked
NtGdiForceUFIMapping
NtGdiFrameRgn
NtGdiFullscreenControl
NtGdiGetAndSetDCDword
NtGdiGetAppClipBox
NtGdiGetAppliedDeviceGammaRamp
NtGdiGetBitmapBits
NtGdiGetBitmapDimension
NtGdiGetBitmapDpiScaleValue
NtGdiGetBoundsRect
NtGdiGetCOPPCompatibleOPMInformation
NtGdiGetCertificate
NtGdiGetCertificateByHandle
NtGdiGetCertificateSize
NtGdiGetCertificateSizeByHandle
NtGdiGetCharABCWidthsW
NtGdiGetCharSet
NtGdiGetCharWidthInfo
NtGdiGetCharWidthW
NtGdiGetCharacterPlacementW
NtGdiGetColorAdjustment
NtGdiGetColorSpaceforBitmap
NtGdiGetCurrentDpiInfo
NtGdiGetDCDpiScaleValue
NtGdiGetDCDword
NtGdiGetDCObject
NtGdiGetDCPoint
NtGdiGetDCforBitmap
NtGdiGetDIBitsInternal
NtGdiGetDeviceCaps
NtGdiGetDeviceCapsAll
NtGdiGetDeviceGammaRamp
NtGdiGetDeviceWidth
NtGdiGetDhpdev
NtGdiGetETM
NtGdiGetEmbUFI
NtGdiGetEmbedFonts
NtGdiGetEntry
NtGdiGetEudcTimeStampEx
NtGdiCreateBitmap
NtGdiGetFontFileData
NtGdiGetFontFileInfo
NtGdiGetFontResourceInfoInternalW
NtGdiGetGammaRampCapability
NtGdiGetGlyphIndicesW
NtGdiGetGlyphIndicesWInternal
NtGdiGetGlyphOutline
NtGdiGetKerningPairs
NtGdiGetLinkedUFIs
NtGdiGetMiterLimit
NtGdiGetMonitorID
NtGdiGetNearestColor
NtGdiGetNearestPaletteIndex
NtGdiGetNumberOfPhysicalMonitors
NtGdiGetOPMInformation
NtGdiGetOPMRandomNumber
NtGdiGetObjectBitmapHandle
NtGdiGetOutlineTextMetricsInternalW
NtGdiGetPath
NtGdiGetPerBandInfo
NtGdiGetPhysicalMonitorDescription
NtGdiGetPhysicalMonitors
NtGdiGetPixel
NtGdiGetRandomRgn
NtGdiGetRasterizerCaps
NtGdiGetRealizationInfo
NtGdiGetRegionData
NtGdiGetRgnBox
NtGdiGetServerMetaFileBits
NtGdiGetSpoolMessage
NtGdiGetStats
NtGdiGetStringBitmapW
NtGdiGetSuggestedOPMProtectedOutputArraySize
NtGdiGetSystemPaletteUse
NtGdiGetTextExtent
NtGdiGetTextExtentExW
NtGdiGetTextFaceW
NtGdiGetTextMetricsW
NtGdiGetTransform
NtGdiGetUFI
NtGdiGetUFIPathname
NtGdiGetWidthTable
NtGdiGradientFill
NtGdiHLSurfGetInformation
NtGdiHLSurfSetInformation
NtGdiHT_Get8BPPFormatPalette
NtGdiHT_Get8BPPMaskPalette
NtGdiHfontCreate
NtGdiIcmBrushInfo
NtGdiInit
NtGdiInitSpool
NtGdiIntersectClipRect
NtGdiInvertRgn
NtGdiLineTo
NtGdiMakeFontDir
NtGdiMakeInfoDC
NtGdiMakeObjectUnXferable
NtGdiMakeObjectXferable
NtGdiMaskBlt
NtGdiMirrorWindowOrg
NtGdiModifyWorldTransform
NtGdiMonoBitmap
NtGdiMoveTo
NtGdiOffsetClipRgn
NtGdiOffsetRgn
NtGdiOpenDCW
NtGdiPATHOBJ_bEnum
NtGdiPATHOBJ_bEnumClipLines
NtGdiPATHOBJ_vEnumStart
NtGdiPATHOBJ_vEnumStartClipLines
NtGdiPATHOBJ_vGetBounds
NtGdiPatBlt
NtGdiPathToRegion
NtGdiPlgBlt
NtGdiPolyDraw
NtGdiPolyPatBlt
NtGdiPolyPolyDraw
NtGdiPolyTextOutW
NtGdiPtInRegion
NtGdiPtVisible
NtGdiQueryFontAssocInfo
NtGdiQueryFonts
NtGdiRectInRegion
NtGdiRectVisible
NtGdiRectangle
NtGdiRemoveFontMemResourceEx
NtGdiRemoveFontResourceW
NtGdiRemoveMergeFont
NtGdiResetDC
NtGdiResizePalette
NtGdiRestoreDC
NtGdiRoundRect
NtGdiSTROBJ_bEnum
NtGdiSTROBJ_bEnumPositionsOnly
NtGdiSTROBJ_bGetAdvanceWidths
NtGdiSTROBJ_dwGetCodePage
NtGdiSTROBJ_vEnumStart
NtGdiSaveDC
NtGdiScaleRgn
NtGdiScaleValues
NtGdiScaleViewportExtEx
NtGdiScaleWindowExtEx
NtGdiSelectBitmap
NtGdiSelectBrush
NtGdiSelectClipPath
NtGdiSelectFont
NtGdiSelectPen
NtGdiSetBitmapAttributes
NtGdiSetBitmapBits
NtGdiSetBitmapDimension
NtGdiSetBoundsRect
NtGdiSetBrushAttributes
NtGdiSetBrushOrg
NtGdiSetColorAdjustment
NtGdiSetColorSpace
NtGdiSetDIBitsToDeviceInternal
NtGdiSetDeviceGammaRamp
NtGdiSetFontEnumeration
NtGdiSetFontXform
NtGdiSetIcmMode
NtGdiSetLayout
NtGdiSetLinkedUFIs
NtGdiSetMagicColors
NtGdiSetMetaRgn
NtGdiSetMiterLimit
NtGdiSetOPMSigningKeyAndSequenceNumbers
NtGdiSetPUMPDOBJ
NtGdiSetPixel
NtGdiSetPixelFormat
NtGdiSetPrivateDeviceGammaRamp
NtGdiSetRectRgn
NtGdiSetSizeDevice
NtGdiSetSystemPaletteUse
NtGdiSetTextJustification
NtGdiSetUMPDSandboxState
NtGdiSetVirtualResolution
NtGdiStartDoc
NtGdiStartPage
NtGdiStretchBlt
NtGdiStretchDIBitsInternal
NtGdiStrokeAndFillPath
NtGdiStrokePath
NtGdiSwapBuffers
NtGdiTransformPoints
NtGdiTransparentBlt
NtGdiUMPDEngFreeUserMem
NtGdiUnloadPrinterDriver
NtGdiUnmapMemFont
NtGdiUnrealizeObject
NtGdiUpdateColors
NtGdiUpdateTransform
NtGdiWidenPath
NtGdiXFORMOBJ_bApplyXform
NtGdiXFORMOBJ_iGetXform
NtGdiXLATEOBJ_cGetPalette
NtGdiXLATEOBJ_hGetColorTransform
NtGdiXLATEOBJ_iXlate
NtUserSelectPalette
NtGdiGetPublicFontTableChangeCookie
NtGdiGetProcessSessionFonts
NtGdiEngDeleteSurface
NtGdiEngCreateDeviceSurface
NtGdiEngDeletePalette
NtGdiEngCreateDeviceBitmap
NtGdiEngCreatePalette
NtGdiEngCreateBitmap
NtGdiCreateHalftonePalette
NtGdiConvertMetafileRect
NtGdiConfigureOPMProtectedOutput
NtGdiComputeXformCoefficients
NtGdiCombineTransform
NtGdiCombineRgn
NtGdiColorCorrectPalette
NtGdiCloseFigure
NtGdiClearBrushAttributes
NtGdiClearBitmapAttributes
NtGdiCheckBitmapBits
NtGdiChangeGhostFont
NtGdiCancelDC
NtGdiCLIPOBJ_ppoGetPath
NtGdiCLIPOBJ_cEnumStart
NtGdiCLIPOBJ_bEnum
NtGdiBitBlt
NtGdiBeginPath
NtGdiBeginGdiRendering
NtGdiBRUSHOBJ_ulGetBrushColor
NtGdiBRUSHOBJ_pvGetRbrush
NtGdiBRUSHOBJ_pvAllocRbrush
NtGdiBRUSHOBJ_hGetColorTransform
NtGdiBRUSHOBJ_DeleteRbrush
NtGdiArcInternal
NtGdiAnyLinkedFonts
NtGdiAngleArc
NtGdiAlphaBlend
NtGdiAddRemoteMMInstanceToDC
NtGdiAddRemoteFontToDC
NtGdiAddFontResourceW
NtGdiAddFontMemResourceEx
NtGdiAddEmbFontToDC
NtGdiAbortPath
NtGdiAbortDoc
NtGdiGetTextCharsetInfo
NtGdiGetFontUnicodeRanges
NtGdiAddInitialFonts
NtGdiGetFontData

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-privateprofile-l1-1-0

GetProfileStringW
GetProfileIntW

api-ms-win-core-localization-private-l1-1-0

NlsGetCacheUpdateCount

Exports

Exports

AbortDocImpl
AbortPath
AddFontMemResourceEx
AddFontResourceA
AddFontResourceExA
AddFontResourceExW
AddFontResourceTracking
AddFontResourceWImpl
AngleArc
AnimatePalette
AnyLinkedFonts
Arc
ArcTo
BeginPath
BeginPathImpl
BitBlt
CancelDC
CheckColorsInGamut
ChoosePixelFormat
Chord
ClearBitmapAttributes
ClearBrushAttributes
CloseEnhMetaFile
CloseFigure
CloseFigureImpl
CloseMetaFile
ColorCorrectPalette
ColorMatchToTarget
CombineTransform
CopyEnhMetaFileA
CopyEnhMetaFileW
CopyMetaFileA
CopyMetaFileW
CreateBitmap
CreateBitmapIndirect
CreateBrushIndirect
CreateColorSpaceA
CreateColorSpaceW
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDCAImpl
CreateDCExW
CreateDCW
CreateDIBPatternBrush
CreateDIBPatternBrushPt
CreateDIBSection
CreateDIBitmap
CreateDPIScaledDIBSection
CreateDiscardableBitmap
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateEnhMetaFileA
CreateEnhMetaFileW
CreateFontA
CreateFontIndirectA
CreateFontIndirectExA
CreateFontIndirectExW
CreateFontIndirectW
CreateFontIndirectWImpl
CreateFontW
CreateHalftonePalette
CreateHatchBrush
CreateICA
CreateICW
CreateMetaFileA
CreateMetaFileW
CreatePalette
CreatePatternBrush
CreatePen
CreatePenIndirect
CreatePolyPolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateScalableFontResourceA
CreateScalableFontResourceWImpl
CreateScaledCompatibleBitmap
CreateSessionMappedDIBSection
CreateSolidBrush
DPtoLP
DeleteColorSpace
DeleteDC
DeleteEMFSpoolData
DeleteEnhMetaFile
DeleteMetaFile
DescribePixelFormat
DeviceCapabilitiesExA
DocumentEventEx
DrawEscape
DwmCreatedBitmapRemotingOutput
DwmGetDirtyRgnImpl
Ellipse
EndDoc
EndDocImpl
EndFormPage
EndPage
EndPageImpl
EndPath
EndPathImpl
EngAcquireSemaphore
EngComputeGlyphSet
EngCreateBitmap
EngCreateDeviceBitmap
EngCreateDeviceSurface
EngCreatePalette
EngCreateSemaphore
EngDeletePalette
EngDeleteSemaphore
EngDeleteSurface
EngFindResource
EngFreeModule
EngGetCurrentCodePage
EngGetDriverName
EngGetPrinterDataFileName
EngLoadModule
EngMultiByteToUnicodeN
EngMultiByteToWideChar
EngQueryEMFInfo
EngQueryLocalTime
EngReleaseSemaphore
EngUnicodeToMultiByteN
EngWideCharToMultiByte
EnumEnhMetaFile
EnumFontFamiliesA
EnumFontFamiliesExA
EnumFontFamiliesExW
EnumFontFamiliesW
EnumFontsA
EnumFontsW
EnumICMProfilesA
EnumICMProfilesW
EnumMetaFile
EnumObjects
EscapeImpl
EudcLoadLinkW
EudcUnloadLinkW
ExcludeClipRect
ExtCreatePen
ExtEscapeImpl
ExtFloodFill
ExtSelectClipRgnImpl
ExtTextOutA
ExtTextOutAImpl
ExtTextOutW
ExtTextOutWImpl
FillPath
FillPathImpl
FillRgn
FixBrushOrgEx
FlattenPath
FloodFill
FontIsLinked
FrameRgn
GdiAddFontResourceW
GdiAddGlsBounds
GdiAddGlsRecord
GdiAddInitialFonts
GdiAlphaBlend
GdiArtificialDecrementDriver
GdiCleanCacheDC
GdiComment
GdiConsoleTextOut
GdiConvertAndCheckDC
GdiConvertBitmap
GdiConvertBitmapV5
GdiConvertBrush
GdiConvertDC
GdiConvertEnhMetaFile
GdiConvertFont
GdiConvertMetaFilePict
GdiConvertPalette
GdiConvertRegion
GdiConvertToDevmodeW
GdiCreateLocalEnhMetaFile
GdiCreateLocalMetaFilePict
GdiCurrentProcessSplWow64
GdiDeleteLocalDC
GdiDeleteSpoolFileHandle
GdiDescribePixelFormat
GdiDllInitialize
GdiDllInitializeWrapper
GdiDrawStream
GdiEndDocEMF
GdiEndPageEMF
GdiEntry1
GdiEntry10
GdiEntry11
GdiEntry12
GdiEntry14
GdiEntry15
GdiEntry16
GdiEntry2
GdiEntry3
GdiEntry4
GdiEntry5
GdiEntry6
GdiEntry7
GdiEntry8
GdiEntry9
GdiFixUpHandle
GdiFlush
GdiGetBatchLimit
GdiGetBitmapBitsSize
GdiGetCharDimensions
GdiGetDC
GdiGetDevmodeForPage
GdiGetLocalBrush
GdiGetLocalDC
GdiGetLocalFont
GdiGetPageCount
GdiGetPageHandle
GdiGetSpoolFileHandle
GdiGetVariationStoreDelta
GdiGradientFill
GdiHandleBeingTracked
GdiInitializeLanguagePack
GdiIsMetaFileDC
GdiIsMetaPrintDC
GdiIsPlayMetafileDC
GdiIsScreenDC
GdiIsUMPDSandboxingEnabled
GdiLoadType1Fonts
GdiPlayDCScript
GdiPlayEMF
GdiPlayJournal
GdiPlayPageEMF
GdiPlayPrivatePageEMF
GdiPlayScript
GdiPrinterThunk
GdiProcessSetup
GdiQueryTable
GdiRealizationInfo
GdiReleaseLocalDC
GdiResetDCEMF
GdiSetAttrs
GdiSetBatchLimit
GdiSetPixelFormat
GdiSetServerAttr
GdiStartDocEMF
GdiStartPageEMF
GdiSupportsFontChangeEvent
GdiSwapBuffers
GdiTrackHCreate
GdiTrackHDelete
GdiTransparentBlt
GdiValidateHandle
GditGetCallerTLStorage
GditPopCallerInfo
GditPushCallerInfo
GetArcDirection
GetAspectRatioFilterEx
GetBitmapAttributes
GetBitmapBits
GetBitmapDimensionEx
GetBkColor
GetBkMode
GetBoundsRect
GetBrushAttributes
GetBrushOrgEx
GetCharABCWidthsA
GetCharABCWidthsFloatA
GetCharABCWidthsFloatI
GetCharABCWidthsFloatW
GetCharABCWidthsI
GetCharABCWidthsW
GetCharWidth32A
GetCharWidth32W
GetCharWidthA
GetCharWidthFloatA
GetCharWidthFloatW
GetCharWidthI
GetCharWidthW
GetCharacterPlacementA
GetCharacterPlacementW
GetClipBox
GetClipBoxImpl
GetClipRgn
GetCodePage
GetColorAdjustment
GetColorSpace
GetCurrentObject
GetCurrentPositionEx
GetDCBrushColor
GetDCDpiScaleValue
GetDCOrgEx
GetDCPenColor
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetETM
GetEUDCTimeStamp
GetEUDCTimeStampExW
GetEnhMetaFileA
GetEnhMetaFileBits
GetEnhMetaFileDescriptionA
GetEnhMetaFileDescriptionW
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetEnhMetaFilePixelFormat
GetEnhMetaFileW
GetFontAssocStatus
GetFontData
GetFontDataImpl
GetFontFileData
GetFontFileInfo
GetFontLanguageInfo
GetFontRealizationInfo
GetFontResourceInfoW
GetFontUnicodeRanges
GetGlyphIndicesA
GetGlyphIndicesW
GetGlyphOutlineA
GetGlyphOutlineW
GetGlyphOutlineWow
GetGraphicsMode
GetHFONT
GetICMProfileA
GetICMProfileW
GetKerningPairsA
GetKerningPairsW
GetLayout
GetLogColorSpaceA
GetLogColorSpaceW
GetMapMode
GetMetaFileA
GetMetaFileBitsEx
GetMetaFileW
GetMetaRgn
GetMiterLimit
GetNearestColor
GetNearestPaletteIndex
GetObjectA
GetObjectType
GetObjectW
GetOutlineTextMetricsA
GetOutlineTextMetricsW
GetPaletteEntries
GetPath
GetPixel
GetPixelFormat
GetPolyFillMode
GetProcessSessionFonts
GetROP2
GetRandomRgn
GetRasterizerCaps
GetRegionData
GetRelAbs
GetRgnBox
GetStockObject
GetStretchBltMode
GetStringBitmapA
GetSystemPaletteEntries
GetSystemPaletteUse
GetTextAlign
GetTextCharacterExtra
GetTextCharset
GetTextCharsetInfo
GetTextColor
GetTextExtentExPointA
GetTextExtentExPointI
GetTextExtentExPointW
GetTextExtentExPointWPri
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextExtentPointI
GetTextExtentPointW
GetTextFaceA
GetTextFaceAliasW
GetTextFaceW
GetTextMetricsA
GetTextMetricsAImpl
GetTextMetricsW
GetTransform
GetViewportExtEx
GetViewportOrgEx
GetWinMetaFileBits
GetWindowExtEx
GetWindowOrgEx
GetWorldTransform
IcmDeleteLocalDC
IcmReleaseCachedColorSpace
IntersectClipRect
IntersectClipRectImpl
InvertRgn
IsValidEnhMetaRecord
IsValidEnhMetaRecordOffExt
LPtoDP
LineDDA
LineTo
LineToImpl
LpkDrawTextEx
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkPresent
LpkTabbedTextOut
LpkUseGDIWidthCache
MF16_DeleteObject
MF_DeleteObject
MaskBlt
MirrorRgn
ModerncoreCreateICW
ModerncoreDeleteDC
ModerncoreGdiInit
ModifyWorldTransform
MoveToEx
MoveToExImpl
NamedEscape
NtGdiAbortDoc
NtGdiAbortPath
NtGdiAddEmbFontToDC
NtGdiAddFontMemResourceEx
NtGdiAddFontResourceW
NtGdiAddRemoteFontToDC
NtGdiAddRemoteMMInstanceToDC
NtGdiAlphaBlend
NtGdiAngleArc
NtGdiAnyLinkedFonts
NtGdiArcInternal
NtGdiBRUSHOBJ_DeleteRbrush
NtGdiBRUSHOBJ_hGetColorTransform
NtGdiBRUSHOBJ_pvAllocRbrush
NtGdiBRUSHOBJ_pvGetRbrush
NtGdiBRUSHOBJ_ulGetBrushColor
NtGdiBeginGdiRendering
NtGdiBeginPath
NtGdiBitBlt
NtGdiCLIPOBJ_bEnum
NtGdiCLIPOBJ_cEnumStart
NtGdiCLIPOBJ_ppoGetPath
NtGdiCancelDC
NtGdiChangeGhostFont
NtGdiCheckBitmapBits
NtGdiClearBitmapAttributes
NtGdiClearBrushAttributes
NtGdiCloseFigure
NtGdiColorCorrectPalette
NtGdiCombineRgn
NtGdiCombineTransform
NtGdiComputeXformCoefficients
NtGdiConfigureOPMProtectedOutput
NtGdiConvertMetafileRect
NtGdiCreateBitmap
NtGdiCreateBitmapFromDxSurface
NtGdiCreateBitmapFromDxSurface2
NtGdiCreateClientObj
NtGdiCreateColorSpace
NtGdiCreateColorTransform
NtGdiCreateCompatibleBitmap
NtGdiCreateCompatibleDC
NtGdiCreateDIBBrush
NtGdiCreateDIBSection
NtGdiCreateDIBitmapInternal
NtGdiCreateEllipticRgn
NtGdiCreateHalftonePalette
NtGdiCreateHatchBrushInternal
NtGdiCreateMetafileDC
NtGdiCreateOPMProtectedOutput
NtGdiCreateOPMProtectedOutputs
NtGdiCreatePaletteInternal
NtGdiCreatePatternBrushInternal
NtGdiCreatePen
NtGdiCreateRectRgn
NtGdiCreateRoundRectRgn
NtGdiCreateServerMetaFile
NtGdiCreateSessionMappedDIBSection
NtGdiCreateSolidBrush
NtGdiD3dContextCreate
NtGdiD3dContextDestroy
NtGdiD3dContextDestroyAll
NtGdiD3dDrawPrimitives2
NtGdiD3dValidateTextureStageState
NtGdiDDCCIGetCapabilitiesString
NtGdiDDCCIGetCapabilitiesStringLength
NtGdiDDCCIGetTimingReport
NtGdiDDCCIGetVCPFeature
NtGdiDDCCISaveCurrentSettings
NtGdiDDCCISetVCPFeature
NtGdiDdAddAttachedSurface
NtGdiDdAlphaBlt
NtGdiDdAttachSurface
NtGdiDdBeginMoCompFrame
NtGdiDdBlt
NtGdiDdCanCreateD3DBuffer
NtGdiDdCanCreateSurface
NtGdiDdColorControl
NtGdiDdCreateD3DBuffer
NtGdiDdCreateDirectDrawObject
NtGdiDdCreateFullscreenSprite
NtGdiDdCreateMoComp
NtGdiDdCreateSurface
NtGdiDdCreateSurfaceEx
NtGdiDdCreateSurfaceObject
NtGdiDdDeleteDirectDrawObject
NtGdiDdDeleteSurfaceObject
NtGdiDdDestroyD3DBuffer

Sections

.text
Size: 772KB - Virtual size: 772KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f8d4a81bd3b22f1d106d948eb4bcfce

Code Sign

33:00:00:04:5f:f3:c9:6c:1a:7f:f7:da:1d:00:00:00:00:04:5fCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

c3:82:b3:ce:68:68:9b:91:e4:e6:1d:c7:02:3a:a5:58:e4:85:89:cd:80:6d:0e:00:d1:a5:09:fe:66:70:20:49Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcp_win

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-rtlsupport-l1-2-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-memory-l1-1-1

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-file-l1-2-0

api-ms-win-core-file-l2-1-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-string-l2-1-0

api-ms-win-security-base-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-version-l1-1-1

api-ms-win-core-version-l1-1-0

api-ms-win-core-wow64-l1-1-1

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-stringansi-l1-1-0

gdi32

api-ms-win-core-windowserrorreporting-l1-1-0

ntdll

user32

win32u

api-ms-win-core-delayload-l1-1-1

api-ms-win-core-delayload-l1-1-0

api-ms-win-core-privateprofile-l1-1-0

api-ms-win-core-localization-private-l1-1-0

Exports

Exports

Sections

.text Size: 772KB - Virtual size: 772KB

.data Size: 1024B - Virtual size: 10KB

.idata Size: 23KB - Virtual size: 22KB

.didat Size: 512B - Virtual size: 136B

.rsrc Size: 70KB - Virtual size: 70KB

.reloc Size: 25KB - Virtual size: 25KB

33:00:00:04:5f:f3:c9:6c:1a:7f:f7:da:1d:00:00:00:00:04:5f
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

c3:82:b3:ce:68:68:9b:91:e4:e6:1d:c7:02:3a:a5:58:e4:85:89:cd:80:6d:0e:00:d1:a5:09:fe:66:70:20:49
Signer

.text
Size: 772KB - Virtual size: 772KB

.data
Size: 1024B - Virtual size: 10KB

.idata
Size: 23KB - Virtual size: 22KB

.didat
Size: 512B - Virtual size: 136B

.rsrc
Size: 70KB - Virtual size: 70KB

.reloc
Size: 25KB - Virtual size: 25KB