d3d10level9[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

d3d10level9.dll
Size

317KB
MD5

8c2371aa2e8c6232d0f8e6cb1043d9c7
SHA1

8014a8abbcc5fe8af617ddc73b13357b210ff440
SHA256

ae7b98c85f90dd1586a156481cbc4b741391c67be79419b56016d5453407b9d5
SHA512

80d245866be1d6de5f8cbce4429b2300a63edf1e0ccaa3ce4ac65825ab26134d81e4915feb8926ae122c47c40b8d216e983993af522128f3a46afaa9eca04228
SSDEEP

6144:bPl01o2gmsW11utWVGi2q2HWvF/EGLDrLZpr1yAIlyDPDA1voqqyAKADHtXDmxY8:bPl5PWtMgZphyAImFDmxWZmsQwarVeU

Score

1^/10

Malware Config

Signatures

Files

d3d10level9.dll
.dll windows:10 windows x86 arch:x86

4054c7df7d75d98b3d4bcfcda0403088

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:24

Not After

02/05/2020, 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:1a:08:8f:dc:a8:ab:ab:62:cb:4e:30:ef:3c:b3:20:1c:19:14:0c:f9:b1:c2:aa:c2:60:20:18:f0:4e:72:44
Signer

Actual PE Digest

7e:1a:08:8f:dc:a8:ab:ab:62:cb:4e:30:ef:3c:b3:20:1c:19:14:0c:f9:b1:c2:aa:c2:60:20:18:f0:4e:72:44

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D3D10Level9.pdb

Imports

msvcrt

__CxxFrameHandler3
??0exception@@QAE@ABQBD@Z
_CxxThrowException
?what@exception@@UBEPBDXZ
_purecall
memcpy
memmove
malloc
??0exception@@QAE@ABQBDH@Z
_amsg_exit
_initterm
modf
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_vsnprintf
_lock
_unlock
free
__dllonexit
tolower
_XcptFilter
??0exception@@QAE@ABV0@@Z
_onexit
memcmp
??1exception@@UAE@XZ
memcpy_s
_except_handler4_common
_CIcos
_CIexp
_CIlog
_CIpow
_CIsin
_CIsqrt
_ftol2
_ftol2_sse
floor
memset

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleA
GetModuleFileNameW
GetProcAddress
LoadLibraryExW
FreeLibrary
DisableThreadLibraryCalls

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess

api-ms-win-core-debug-l1-1-0

DebugBreak
OutputDebugStringA

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemInfo
GetSystemTimeAsFileTime

api-ms-win-core-synch-l1-1-0

EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection

api-ms-win-ntuser-sysparams-l1-1-0

DisplayConfigGetDeviceInfo

api-ms-win-core-errorhandling-l1-1-0

GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventWrite
EventSetInformation
EventRegister
EventWriteTransfer

api-ms-win-ntuser-rectangle-l1-1-0

EqualRect
SetRect
IntersectRect

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

D3D10CheckLevel9Hardware
D3D10Level9DumpJournal
D3D11CreateDeviceExternalImplementation
D3DKMTAcquireKeyedMutex
D3DKMTAcquireKeyedMutex2
D3DKMTChangeVideoMemoryReservation
D3DKMTCheckMultiPlaneOverlaySupport
D3DKMTCheckMultiPlaneOverlaySupport2
D3DKMTCloseAdapter
D3DKMTConfigureSharedResource
D3DKMTCreateAllocation
D3DKMTCreateAllocation2
D3DKMTCreateContext
D3DKMTCreateContextVirtual
D3DKMTCreateDevice
D3DKMTCreateKeyedMutex
D3DKMTCreateKeyedMutex2
D3DKMTCreatePagingQueue
D3DKMTCreateSynchronizationObject
D3DKMTCreateSynchronizationObject2
D3DKMTDestroyAllocation
D3DKMTDestroyAllocation2
D3DKMTDestroyContext
D3DKMTDestroyDevice
D3DKMTDestroyKeyedMutex
D3DKMTDestroyPagingQueue
D3DKMTDestroySynchronizationObject
D3DKMTEscape
D3DKMTEvict
D3DKMTFlushHeapTransitions
D3DKMTFreeGpuVirtualAddress
D3DKMTGetAllocationPriority
D3DKMTGetContextInProcessSchedulingPriority
D3DKMTGetContextSchedulingPriority
D3DKMTGetDeviceSchedulingPriority
D3DKMTGetDeviceState
D3DKMTGetDisplayModeList
D3DKMTGetMultisampleMethodList
D3DKMTGetResourcePresentPrivateDriverData
D3DKMTGetRuntimeData
D3DKMTGetSharedPrimaryHandle
D3DKMTGetThunkVersion
D3DKMTInvalidateCache
D3DKMTLock
D3DKMTLock2
D3DKMTMakeResident
D3DKMTMapGpuVirtualAddress
D3DKMTMarkDeviceAsError
D3DKMTOfferAllocations
D3DKMTOpenAdapterFromDeviceName
D3DKMTOpenAdapterFromGdiDisplayName
D3DKMTOpenKeyedMutex
D3DKMTOpenKeyedMutex2
D3DKMTOpenNtHandleFromName
D3DKMTOpenResource
D3DKMTOpenResource2
D3DKMTOpenResourceFromNtHandle
D3DKMTOpenSyncObjectFromNtHandle
D3DKMTOpenSyncObjectFromNtHandle2
D3DKMTOpenSyncObjectNtHandleFromName
D3DKMTOpenSynchronizationObject
D3DKMTOutputDuplPresent
D3DKMTPinDirectFlipResources
D3DKMTPresent
D3DKMTPresentMultiPlaneOverlay
D3DKMTPresentMultiPlaneOverlay2
D3DKMTQueryAdapterInfo
D3DKMTQueryAllocationResidency
D3DKMTQueryClockCalibration
D3DKMTQueryResourceInfo
D3DKMTQueryResourceInfoFromNtHandle
D3DKMTQueryVideoMemoryInfo
D3DKMTReclaimAllocations
D3DKMTReclaimAllocations2
D3DKMTRegisterTrimNotification
D3DKMTReleaseKeyedMutex
D3DKMTReleaseKeyedMutex2
D3DKMTRender
D3DKMTReserveGpuVirtualAddress
D3DKMTSetAllocationPriority
D3DKMTSetContextInProcessSchedulingPriority
D3DKMTSetContextSchedulingPriority
D3DKMTSetDeviceSchedulingPriority
D3DKMTSetDisplayMode
D3DKMTSetDisplayPrivateDriverFormat
D3DKMTSetGammaRamp
D3DKMTSetQueuedLimit
D3DKMTSetStablePowerState
D3DKMTSetVidPnSourceOwner
D3DKMTSetVidPnSourceOwner1
D3DKMTShareObjects
D3DKMTSignalSynchronizationObject
D3DKMTSignalSynchronizationObject2
D3DKMTSignalSynchronizationObjectFromCpu
D3DKMTSignalSynchronizationObjectFromGpu
D3DKMTSignalSynchronizationObjectFromGpu2
D3DKMTSubmitCommand
D3DKMTUnlock
D3DKMTUnlock2
D3DKMTUnpinDirectFlipResources
D3DKMTUnregisterTrimNotification
D3DKMTUpdateAllocationProperty
D3DKMTUpdateGpuVirtualAddress
D3DKMTWaitForSynchronizationObject
D3DKMTWaitForSynchronizationObject2
D3DKMTWaitForSynchronizationObjectFromCpu
D3DKMTWaitForSynchronizationObjectFromGpu
D3DKMTWaitForVerticalBlankEvent
D3DKMTWaitForVerticalBlankEvent2
LogMarkerStringTable
OpenAdapter10
OpenAdapter10_2
RetrieveFilteredOpenAdapter

Sections

.text
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4054c7df7d75d98b3d4bcfcda0403088

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

7e:1a:08:8f:dc:a8:ab:ab:62:cb:4e:30:ef:3c:b3:20:1c:19:14:0c:f9:b1:c2:aa:c2:60:20:18:f0:4e:72:44Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-ntuser-rectangle-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-delayload-l1-1-1

api-ms-win-core-delayload-l1-1-0

Exports

Exports

Sections

.text Size: 280KB - Virtual size: 280KB

.data Size: 6KB - Virtual size: 24KB

.idata Size: 3KB - Virtual size: 3KB

.didat Size: 512B - Virtual size: 20B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 11KB - Virtual size: 10KB

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

7e:1a:08:8f:dc:a8:ab:ab:62:cb:4e:30:ef:3c:b3:20:1c:19:14:0c:f9:b1:c2:aa:c2:60:20:18:f0:4e:72:44
Signer

.text
Size: 280KB - Virtual size: 280KB

.data
Size: 6KB - Virtual size: 24KB

.idata
Size: 3KB - Virtual size: 3KB

.didat
Size: 512B - Virtual size: 20B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 11KB - Virtual size: 10KB