d3d10_1[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3d10_1.dll
Size

184KB
MD5

02349ca197802ae7f1dffd330a55b2cb
SHA1

0a20e34c0046166d9e29622689559724dc33cf81
SHA256

9483c359becd40fc7f38cfdf167e0f7f80e5c08a59a63b7340ff35cb3e20c19b
SHA512

b1209cbd5061031cfc65d1c7c34bfbf16bda7797f2d75e06aece55d4fd78f0cdea4605804fa8fd244638dfcc3e440985712e1ce67382fa7182c4a4c83d5351a5
SSDEEP

3072:p1GAwljxGfgAfgL6XJpMEyOvu//MvINs7Ii5XgQyqZJAgWZCr:pOIokvINRiJzyqZmrC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3d10_1.dll

Files

d3d10_1.dll
.dll windows:6 windows x64 arch:x64

52d298752f5b7b6da03c1fc1db6e962e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3d10_1.pdb

Imports

d3d10_1core

D3D10CoreRegisterLayers
D3D10CoreCreateDevice1
D3D10CoreGetVersion

msvcrt

memset
memcpy
_onexit
__dllonexit
_unlock
_lock
__C_specific_handler
_initterm
_amsg_exit
powf
isspace
atoi
isdigit
strstr
strchr
tolower
malloc
free
strcmp
_stricmp
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
sqrtf
sinf
_XcptFilter
_vsnprintf
acosf
asinf
atan2f
atanf
ceilf
cosf
floorf
logf

ntdll

WinSqmAddToStreamEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
WinSqmIsOptedIn

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA
GetProcAddress
GetModuleHandleA
LoadLibraryExA
DisableThreadLibraryCalls
FreeLibrary
GetModuleHandleExW
LoadLibraryExW

api-ms-win-core-registry-l1-1-0

RegEnumKeyExA
RegQueryValueExA
RegGetValueW
RegCloseKey
RegOpenKeyExA
RegOpenKeyExW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-debug-l1-1-1

OutputDebugStringA

api-ms-win-core-synch-l1-2-0

Sleep
EnterCriticalSection
InitOnceBeginInitialize
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
InitOnceComplete
OpenSemaphoreW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-1

UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter

api-ms-win-core-file-l1-2-1

CreateFileA
GetFileSize

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
TerminateProcess

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-2-1

GetSystemTimeAsFileTime
GetTickCount

dxgi

CreateDXGIFactory

d3d11

D3D11CreateDeviceAndSwapChain

Exports

Exports

D3D10CompileEffectFromMemory
D3D10CompileShader
D3D10CreateBlob
D3D10CreateDevice1
D3D10CreateDeviceAndSwapChain1
D3D10CreateEffectFromMemory
D3D10CreateEffectPoolFromMemory
D3D10CreateStateBlock
D3D10DisassembleEffect
D3D10DisassembleShader
D3D10GetGeometryShaderProfile
D3D10GetInputAndOutputSignatureBlob
D3D10GetInputSignatureBlob
D3D10GetOutputSignatureBlob
D3D10GetPixelShaderProfile
D3D10GetShaderDebugInfo
D3D10GetVersion
D3D10GetVertexShaderProfile
D3D10PreprocessShader
D3D10ReflectShader
D3D10RegisterLayers
D3D10StateBlockMaskDifference
D3D10StateBlockMaskDisableAll
D3D10StateBlockMaskDisableCapture
D3D10StateBlockMaskEnableAll
D3D10StateBlockMaskEnableCapture
D3D10StateBlockMaskGetSetting
D3D10StateBlockMaskIntersect
D3D10StateBlockMaskUnion
RevertToOldImplementation

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52d298752f5b7b6da03c1fc1db6e962e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d10_1core

msvcrt

ntdll

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-debug-l1-1-1

api-ms-win-core-synch-l1-2-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-file-l1-2-1

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-2-1

dxgi

d3d11

Exports

Exports

Sections

.text Size: 164KB - Virtual size: 163KB

.data Size: 4KB - Virtual size: 10KB

.pdata Size: 5KB - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 1016B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 164KB - Virtual size: 163KB

.data
Size: 4KB - Virtual size: 10KB

.pdata
Size: 5KB - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 1016B

.reloc
Size: 5KB - Virtual size: 4KB