d3d10_1core[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

d3d10_1core.dll
Size

379KB
MD5

4dc38272d13826b52b71a03ff86c1b87
SHA1

a77dc119378edd6cafb49c560ec96efe2f74d206
SHA256

4810b78ad6290021ce5d6ab2195f658e68dec7caf6d8fe9e96019f8a40cea66d
SHA512

d501cfb350c2ece0982524631f216bf760aab2450492789135de42200468e905caaef91a87d546bd75968922630478783121709425adfd38ee3aa1021d92c1b1
SSDEEP

6144:dGfJmk98riYKxtH11JV9XYwO+kMlVr/eA/tZg:Yv9siYqHJYwO+xlVLZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3d10_1core.dll

Files

d3d10_1core.dll
.dll windows:6 windows x64 arch:x64

6fb1985eeb0037480a5293a891c5a2cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3d10_1core.pdb

Imports

msvcrt

??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
_lock
_initterm
_amsg_exit
_XcptFilter
__CxxFrameHandler3
memcmp
__C_specific_handler
memset
_aligned_free
_aligned_malloc
_purecall
ldiv
??0exception@@QEAA@XZ
memmove_s
??0exception@@QEAA@AEBQEBD@Z
memcpy_s
_CxxThrowException
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
malloc
free
isdigit
tolower
_stricmp
_callnewh
memcpy

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
EtwEventWrite
EtwEventUnregister
EtwEventRegister
RtlVirtualUnwind

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleA
GetProcAddress
GetModuleHandleExA
GetModuleFileNameW
GetModuleHandleW
DisableThreadLibraryCalls

api-ms-win-core-errorhandling-l1-1-1

RaiseException
SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter

api-ms-win-security-base-l1-2-0

AllocateLocallyUniqueId

api-ms-win-core-synch-l1-2-0

DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
InitializeCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared

api-ms-win-core-debug-l1-1-1

OutputDebugStringA
DebugBreak

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcessId
GetCurrentProcess
TerminateProcess
GetCurrentThreadId

api-ms-win-core-heap-obsolete-l1-1-0

LocalFree

dxgi

DXGID3D10CreateDevice
DXGID3D10CreateLayeredDevice
DXGID3D10RegisterLayers
DXGID3D10GetLayeredDeviceSize

user32

UnregisterClassA

Exports

Exports

D3D10CoreCreateDevice1
D3D10CoreGetSupportedVersions
D3D10CoreGetVersion
D3D10CoreRegisterLayers
D3DKMTCloseAdapter
D3DKMTCreateAllocation
D3DKMTCreateContext
D3DKMTCreateDevice
D3DKMTCreateSynchronizationObject
D3DKMTDestroyAllocation
D3DKMTDestroyContext
D3DKMTDestroyDevice
D3DKMTDestroySynchronizationObject
D3DKMTEscape
D3DKMTGetContextSchedulingPriority
D3DKMTGetDeviceState
D3DKMTGetDisplayModeList
D3DKMTGetMultisampleMethodList
D3DKMTGetRuntimeData
D3DKMTGetSharedPrimaryHandle
D3DKMTLock
D3DKMTOpenAdapterFromHdc
D3DKMTOpenResource
D3DKMTPresent
D3DKMTQueryAdapterInfo
D3DKMTQueryAllocationResidency
D3DKMTQueryResourceInfo
D3DKMTRender
D3DKMTSetAllocationPriority
D3DKMTSetContextSchedulingPriority
D3DKMTSetDisplayMode
D3DKMTSetDisplayPrivateDriverFormat
D3DKMTSetGammaRamp
D3DKMTSetVidPnSourceOwner
D3DKMTSignalSynchronizationObject
D3DKMTUnlock
D3DKMTWaitForSynchronizationObject
D3DKMTWaitForVerticalBlankEvent
OpenAdapter10
OpenAdapter10_2

Sections

.text
Size: 293KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text_hf
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.hf_mt
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fb1985eeb0037480a5293a891c5a2cb

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ntdll

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-security-base-l1-2-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-debug-l1-1-1

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-heap-obsolete-l1-1-0

dxgi

user32

Exports

Exports

Sections

.text Size: 293KB - Virtual size: 292KB

.text_hf Size: 31KB - Virtual size: 30KB

.hf_mt Size: 11KB - Virtual size: 10KB

.data Size: 1KB - Virtual size: 7KB

.pdata Size: 14KB - Virtual size: 14KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 293KB - Virtual size: 292KB

.text_hf
Size: 31KB - Virtual size: 30KB

.hf_mt
Size: 11KB - Virtual size: 10KB

.data
Size: 1KB - Virtual size: 7KB

.pdata
Size: 14KB - Virtual size: 14KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 4KB