D3DCompiler_47[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

D3DCompiler_47.dll
Size

3.6MB
MD5

acbe1b64e30cc0635afb29f82e9415da
SHA1

b44ae007bb3235d4cf122b99066aeae3a680ffeb
SHA256

6b3d7e43d947907074574ba1d50a06ca8f409128435bfa0344ee3c741984ecd4
SHA512

c0d461043a7795659529c58754475176984bab18440a7047c3dfb1e0e1c7df1550dc42781d2d3d6d5e86d73d64eccd46bc167fd567e41c37eb5f33a5aa30c526
SSDEEP

49152:Z0Baay7MjPEUSYxqFij7/zMUVhMhkr6D0Xa4Scqk5J5sRuQUSLBNRmI:ZQaayyPEUDxqGvMUUObh9P5sRu+z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
D3DCompiler_47.dll

Files

D3DCompiler_47.dll
.dll windows:10 windows x86 arch:x86

64c2814569d0679738764df90dde9547

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_47.pdb

Imports

msvcrt

isxdigit
atof
strchr
setlocale
strnlen
_purecall
strtoul
__dllonexit
modf
_vsnwprintf
_mbstrlen
_strdup
tolower
_initterm
_controlfp
_finite
_fpclass
memmove
_clearfp
_unlock
strncmp
strncpy_s
_lock
??1type_info@@UAE@XZ
malloc
__isascii
_strnicmp
atoi
isdigit
strrchr
_onexit
wcsncmp
wcsncpy_s
_wcsicmp
memcpy
memset
fclose
_amsg_exit
qsort
strcat_s
strstr
_CxxThrowException
_snwprintf_s
__unDName
fread
fseek
_wfsopen
wcstoul
_fileno
sscanf_s
_filelengthi64
towlower
_wcsnicmp
_wsplitpath_s
wcscpy_s
wcsncat_s
wcsrchr
swprintf_s
_wmakepath_s
time
_wcsdup
_wgetenv
_wfullpath
_chsize_s
_close
_read
_write
_lseeki64
_get_osfhandle
_open_osfhandle
wcscat_s
ftell
_mbscmp
_memicmp
toupper
_atoi64
_errno
strtod
_strtoui64
?terminate@@YAXXZ
isalpha
_isnan
strcpy_s
memcpy_s
_except_handler4_common
_XcptFilter
bsearch
_callnewh
isalnum
getenv
free
_stricmp
sprintf_s
_vsnprintf
isspace
_wsopen
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
__CxxFrameHandler3
_ftol2
_ftol2_sse
ceil
floor

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExW
FreeLibrary
DisableThreadLibraryCalls
GetProcAddress
GetModuleFileNameA

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-synch-l1-2-0

LeaveCriticalSection
EnterCriticalSection
Sleep
InitializeCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount

api-ms-win-core-debug-l1-1-1

OutputDebugStringA

api-ms-win-core-heap-l1-2-0

HeapCreate
HeapDestroy
HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-file-l1-2-1

GetFullPathNameW
GetFullPathNameA
ReadFile
GetFileSizeEx
SetFilePointer
WriteFile
CreateFileA
SetFilePointerEx
SetEndOfFile
GetFileType
DeleteFileW
CreateFileW
SetFileAttributesW
GetFileAttributesW
GetFileSize
CreateFile2

api-ms-win-core-memory-l1-1-2

VirtualAlloc
MapViewOfFile
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
FlushViewOfFile
CreateFileMappingW

api-ms-win-core-sysinfo-l1-2-1

GetSystemTimeAsFileTime
GetSystemInfo
GetTickCount

api-ms-win-core-errorhandling-l1-1-1

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
SetLastError

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-processthreads-l1-1-2

TlsGetValue
TlsFree
TlsAlloc
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
TlsSetValue

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-core-registry-l1-1-0

RegEnumKeyExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegCloseKey

api-ms-win-core-localization-l1-2-1

LCMapStringW

api-ms-win-core-io-l1-1-1

DeviceIoControl

rpcrt4

UuidCreate

api-ms-win-core-processenvironment-l1-2-0

GetEnvironmentVariableA
ExpandEnvironmentStringsW

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiA

cryptsp

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64c2814569d0679738764df90dde9547

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-debug-l1-1-1

api-ms-win-core-heap-l1-2-0

api-ms-win-core-file-l1-2-1

api-ms-win-core-memory-l1-1-2

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-handle-l1-1-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-profile-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-localization-l1-2-1

api-ms-win-core-io-l1-1-1

rpcrt4

api-ms-win-core-processenvironment-l1-2-0

api-ms-win-core-string-obsolete-l1-1-0

cryptsp

Exports

Exports

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.data Size: 25KB - Virtual size: 57KB

.idata Size: 6KB - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 124KB - Virtual size: 124KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: 25KB - Virtual size: 57KB

.idata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 124KB - Virtual size: 124KB