d3d10core[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

d3d10core.dll
Size

341KB
MD5

f7e4cb7f59a791e63bbba8a48248800e
SHA1

26a7e838c3f340ad58fbcf8e6acfaee41f883161
SHA256

52b4968f6a047cae713b5a704cffd16abac0c0bbbdbed1893d2f4cd30de3b986
SHA512

dad85a56ab4969fd454340aca9511b2f897a517abe1135abbde10648f4cbbbf4fa7bf891fb7b9eab4768cb919b5c1ecb57a2f146f89bccea23d7c60e8eed25d4
SSDEEP

6144:0apNmX/+4i668+qnk6DrAChy93Woy2ePObyhuxSOmQJ7zgWkcoZzj:0oQ/ZD+qnk6DrAChy93Woy2ePObRJJ7q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3d10core.dll

Files

d3d10core.dll
.dll windows:6 windows x64 arch:x64

f931959285a7457ab4eff30fba69bdbd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3d10core.pdb

Imports

msvcrt

??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
_lock
_initterm
_amsg_exit
_XcptFilter
__CxxFrameHandler3
memcmp
tolower
__C_specific_handler
memset
_aligned_free
_aligned_malloc
ldiv
??0exception@@QEAA@XZ
memmove_s
??0exception@@QEAA@AEBQEBD@Z
memcpy_s
_CxxThrowException
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
malloc
free
isdigit
_stricmp
_callnewh
memcpy

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
EtwEventWrite
EtwEventUnregister
EtwEventRegister
RtlVirtualUnwind

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
GetProcAddress
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleA

api-ms-win-core-errorhandling-l1-1-1

GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException

api-ms-win-security-base-l1-2-0

AllocateLocallyUniqueId

api-ms-win-core-synch-l1-2-0

Sleep
InitializeCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
DeleteCriticalSection
ReleaseSRWLockShared
AcquireSRWLockShared

api-ms-win-core-debug-l1-1-1

OutputDebugStringA
DebugBreak

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcessId
GetCurrentThreadId
TerminateProcess
GetCurrentProcess

api-ms-win-core-heap-obsolete-l1-1-0

LocalFree

dxgi

DXGID3D10CreateLayeredDevice
DXGID3D10GetLayeredDeviceSize
DXGID3D10RegisterLayers
DXGID3D10CreateDevice

user32

UnregisterClassA

Exports

Exports

D3D10CoreCreateDevice
D3D10CoreGetSupportedVersions
D3D10CoreGetVersion
D3D10CoreRegisterLayers
D3DKMTCloseAdapter
D3DKMTCreateAllocation
D3DKMTCreateContext
D3DKMTCreateDevice
D3DKMTCreateSynchronizationObject
D3DKMTDestroyAllocation
D3DKMTDestroyContext
D3DKMTDestroyDevice
D3DKMTDestroySynchronizationObject
D3DKMTEscape
D3DKMTGetContextSchedulingPriority
D3DKMTGetDeviceState
D3DKMTGetDisplayModeList
D3DKMTGetMultisampleMethodList
D3DKMTGetRuntimeData
D3DKMTGetSharedPrimaryHandle
D3DKMTLock
D3DKMTOpenAdapterFromHdc
D3DKMTOpenResource
D3DKMTPresent
D3DKMTQueryAdapterInfo
D3DKMTQueryAllocationResidency
D3DKMTQueryResourceInfo
D3DKMTRender
D3DKMTSetAllocationPriority
D3DKMTSetContextSchedulingPriority
D3DKMTSetDisplayMode
D3DKMTSetDisplayPrivateDriverFormat
D3DKMTSetGammaRamp
D3DKMTSetVidPnSourceOwner
D3DKMTSignalSynchronizationObject
D3DKMTUnlock
D3DKMTWaitForSynchronizationObject
D3DKMTWaitForVerticalBlankEvent
OpenAdapter10
OpenAdapter10_2

Sections

.text
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text_hf
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.hf_mt
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f931959285a7457ab4eff30fba69bdbd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ntdll

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-security-base-l1-2-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-debug-l1-1-1

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-heap-obsolete-l1-1-0

dxgi

user32

Exports

Exports

Sections

.text Size: 260KB - Virtual size: 259KB

.text_hf Size: 27KB - Virtual size: 27KB

.hf_mt Size: 11KB - Virtual size: 10KB

.data Size: 1KB - Virtual size: 7KB

.pdata Size: 13KB - Virtual size: 13KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 260KB - Virtual size: 259KB

.text_hf
Size: 27KB - Virtual size: 27KB

.hf_mt
Size: 11KB - Virtual size: 10KB

.data
Size: 1KB - Virtual size: 7KB

.pdata
Size: 13KB - Virtual size: 13KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 4KB - Virtual size: 3KB