d3d10level9[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

d3d10level9.dll
Size

720KB
MD5

5eb75c806f170a5698dd0c79f3083074
SHA1

523266eb8f3859d26526ca0cc2ce814cef09c69a
SHA256

3d39a21e497176b10672ba8e65a47902d2a09ce301e569e2bce5a5085d95e9c5
SHA512

34c283469a1cc4a23495a305f2e05a6cc6de84921de8f26e14d2fd546acdb3e9112124c25b8c4af4da0b597b925da162c7dbc615ddf1e2906f18e12ca0658be6
SSDEEP

12288:RBKwo3nFs+AQOM7JWXa/DdeI8BF+CLAtU:RBfo3nFs+AQhAXEZejaCL/

Score

1^/10

Malware Config

Signatures

Files

d3d10level9.dll
.dll windows:6 windows x64 arch:x64

7718c9383c95d309b670c1ef9b3badca

Code Sign

33:00:00:01:06:6e:c3:25:c4:31:c9:18:0e:00:00:00:00:01:06
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/10/2016, 20:39

Not After

11/01/2018, 20:39

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d5:37:70:69:c3:74:44:52:f9:80:5b:a1:52:75:d9:a3:23:c4:c5:21:07:3b:70:49:27:3c:b1:8a:39:da:bd:ad
Signer

Actual PE Digest

d5:37:70:69:c3:74:44:52:f9:80:5b:a1:52:75:d9:a3:23:c4:c5:21:07:3b:70:49:27:3c:b1:8a:39:da:bd:ad

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D3D10Level9.pdb

Imports

msvcrt

??0exception@@QEAA@XZ
??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
modff
_lock
?terminate@@YAXXZ
__C_specific_handler
memmove_s
_purecall
_aligned_malloc
??0exception@@QEAA@AEBQEBD@Z
??1exception@@UEAA@XZ
_vsnprintf
_initterm
_amsg_exit
?what@exception@@UEBAPEBDXZ
_XcptFilter
??0exception@@QEAA@AEBQEBDH@Z
__CxxFrameHandler3
_CxxThrowException
free
_resetstkoflw
qsort
malloc
tolower
memcpy_s
??0exception@@QEAA@AEBV0@@Z
memmove
_aligned_free
cosf
expf
floorf
logf
memcmp
memcpy
memset
powf
sinf
sqrt
sqrtf

api-ms-win-core-processthreads-l1-1-2

TlsAlloc
CreateThread
GetCurrentProcess
TlsGetValue
GetCurrentThreadId
TerminateProcess
TlsSetValue
GetCurrentProcessId
IsProcessorFeaturePresent

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetSystemInfo
GetSystemTimeAsFileTime

api-ms-win-core-synch-l1-2-0

DeleteCriticalSection
InitializeCriticalSection
Sleep
WaitForMultipleObjectsEx
EnterCriticalSection
CreateEventA
LeaveCriticalSection
SetEvent
WaitForSingleObject

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameW
GetModuleFileNameA
DisableThreadLibraryCalls
LoadLibraryExW
LoadLibraryExA
FreeLibraryAndExitThread
FreeLibrary
GetModuleHandleA
GetProcAddress

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventRegister
EventWrite

api-ms-win-core-debug-l1-1-1

DebugBreak
OutputDebugStringA

api-ms-win-core-heap-l1-2-0

HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-registry-l1-1-0

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

api-ms-win-core-memory-l1-1-2

VirtualFree
VirtualProtect
VirtualAlloc

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-processenvironment-l1-2-0

GetEnvironmentVariableA

api-ms-win-core-rtlsupport-l1-2-0

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-heap-obsolete-l1-1-0

LocalAlloc
LocalFree

api-ms-win-core-string-obsolete-l1-1-0

lstrlenA

dxgi

CreateDXGIFactory

api-ms-win-core-delayload-l1-1-1

DelayLoadFailureHook
ResolveDelayLoadedAPI

Exports

Exports

D3D10CheckLevel9Hardware
D3D10CreateDeviceExternalImplementation
D3D10Level9DumpJournal
D3D11CreateDeviceExternalImplementation
D3DKMTAcquireKeyedMutex
D3DKMTAcquireKeyedMutex2
D3DKMTCheckMultiPlaneOverlaySupport
D3DKMTCloseAdapter
D3DKMTConfigureSharedResource
D3DKMTCreateAllocation
D3DKMTCreateAllocation2
D3DKMTCreateContext
D3DKMTCreateDevice
D3DKMTCreateKeyedMutex
D3DKMTCreateKeyedMutex2
D3DKMTCreateSynchronizationObject
D3DKMTCreateSynchronizationObject2
D3DKMTDestroyAllocation
D3DKMTDestroyContext
D3DKMTDestroyDevice
D3DKMTDestroyKeyedMutex
D3DKMTDestroySynchronizationObject
D3DKMTEscape
D3DKMTGetContextInProcessSchedulingPriority
D3DKMTGetContextSchedulingPriority
D3DKMTGetDeviceSchedulingPriority
D3DKMTGetDeviceState
D3DKMTGetDisplayModeList
D3DKMTGetMultisampleMethodList
D3DKMTGetRuntimeData
D3DKMTGetSharedPrimaryHandle
D3DKMTGetThunkVersion
D3DKMTLock
D3DKMTOfferAllocations
D3DKMTOpenAdapterFromDeviceName
D3DKMTOpenAdapterFromGdiDisplayName
D3DKMTOpenKeyedMutex
D3DKMTOpenKeyedMutex2
D3DKMTOpenNtHandleFromName
D3DKMTOpenResource
D3DKMTOpenResource2
D3DKMTOpenResourceFromNtHandle
D3DKMTOpenSyncObjectFromNtHandle
D3DKMTOpenSynchronizationObject
D3DKMTOutputDuplPresent
D3DKMTPinDirectFlipResources
D3DKMTPresent
D3DKMTPresentMultiPlaneOverlay
D3DKMTQueryAdapterInfo
D3DKMTQueryAllocationResidency
D3DKMTQueryResourceInfo
D3DKMTQueryResourceInfoFromNtHandle
D3DKMTReclaimAllocations
D3DKMTReleaseKeyedMutex
D3DKMTReleaseKeyedMutex2
D3DKMTRender
D3DKMTSetAllocationPriority
D3DKMTSetContextInProcessSchedulingPriority
D3DKMTSetContextSchedulingPriority
D3DKMTSetDeviceSchedulingPriority
D3DKMTSetDisplayMode
D3DKMTSetDisplayPrivateDriverFormat
D3DKMTSetGammaRamp
D3DKMTSetQueuedLimit
D3DKMTSetVidPnSourceOwner
D3DKMTSetVidPnSourceOwner1
D3DKMTShareObjects
D3DKMTSignalSynchronizationObject
D3DKMTSignalSynchronizationObject2
D3DKMTUnlock
D3DKMTUnpinDirectFlipResources
D3DKMTWaitForSynchronizationObject
D3DKMTWaitForSynchronizationObject2
D3DKMTWaitForVerticalBlankEvent
D3DKMTWaitForVerticalBlankEvent2
LogMarkerStringTable
OpenAdapter10
OpenAdapter10_2
RetrieveFilteredOpenAdapter

Sections

.text
Size: 587KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7718c9383c95d309b670c1ef9b3badca

Code Sign

33:00:00:01:06:6e:c3:25:c4:31:c9:18:0e:00:00:00:00:01:06Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

d5:37:70:69:c3:74:44:52:f9:80:5b:a1:52:75:d9:a3:23:c4:c5:21:07:3b:70:49:27:3c:b1:8a:39:da:bd:adSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-synch-l1-2-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-util-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-debug-l1-1-1

api-ms-win-core-heap-l1-2-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-memory-l1-1-2

api-ms-win-core-handle-l1-1-0

api-ms-win-core-processenvironment-l1-2-0

api-ms-win-core-rtlsupport-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-string-obsolete-l1-1-0

dxgi

api-ms-win-core-delayload-l1-1-1

Exports

Exports

Sections

.text Size: 587KB - Virtual size: 587KB

.data Size: 5KB - Virtual size: 23KB

.pdata Size: 23KB - Virtual size: 23KB

.idata Size: 5KB - Virtual size: 4KB

.didat Size: 512B - Virtual size: 80B

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 2KB - Virtual size: 2KB

33:00:00:01:06:6e:c3:25:c4:31:c9:18:0e:00:00:00:00:01:06
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

d5:37:70:69:c3:74:44:52:f9:80:5b:a1:52:75:d9:a3:23:c4:c5:21:07:3b:70:49:27:3c:b1:8a:39:da:bd:ad
Signer

.text
Size: 587KB - Virtual size: 587KB

.data
Size: 5KB - Virtual size: 23KB

.pdata
Size: 23KB - Virtual size: 23KB

.idata
Size: 5KB - Virtual size: 4KB

.didat
Size: 512B - Virtual size: 80B

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 2KB - Virtual size: 2KB