example_win32_directx11[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

example_win32_directx11.exe
Size

3.5MB
MD5

537bda95886bd83077cfcb0867cafbc1
SHA1

13fea932712e69dbc239bf0d5c21c18912229d60
SHA256

c5b75818d06b3866025f700b723b3c56ec9aeb496a66d643275e5ac0cb82184f
SHA512

008c406ba0eed0b0d0e3ec8dcd823a691976fd1a320421287fd7f6553593eff07f6c2a26a9e7df7a8847c2e7b9b4460c71b2dcf41baef6569b17acc8109bdd90
SSDEEP

49152:H7MORXsUWo5KlnqHAnFo3alRJ9GBRdCQbiddRTzukNnw38pogqEA29WBCge8RKF7:HVRXNWCKl23aZg5ChUkNnVr7Rye82T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
example_win32_directx11.exe

Files

example_win32_directx11.exe
.exe windows:6 windows x64 arch:x64

72034f7a7ce55a47d15c2a06fbd2cd6e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\azele\Desktop\imgui wolfram\examples\example_win32_directx11\Release\example_win32_directx11.pdb

Imports

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

kernel32

GetLocaleInfoA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetModuleHandleW
GetSystemTimeAsFileTime
GetCurrentThreadId
CreateFileA
GetFileSizeEx
ReadFile
CloseHandle
HeapAlloc
MultiByteToWideChar
GlobalUnlock
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
WideCharToMultiByte
GlobalLock
GlobalFree
HeapFree
GlobalAlloc
GetCurrentProcessId
InitializeSListHead

user32

GetSystemMetrics
ShowWindow
GetAsyncKeyState
DestroyWindow
RegisterClassExW
UnregisterClassW
CreateWindowExW
DispatchMessageW
PeekMessageW
TranslateMessage
PostQuitMessage
UpdateWindow
GetKeyState
GetMessageExtraInfo
ScreenToClient
GetCapture
ClientToScreen
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
DefWindowProcW
SetCursorPos
ReleaseCapture
IsWindowUnicode
GetClientRect
SetCursor
SetCapture
LoadCursorW
GetForegroundWindow
TrackMouseEvent
GetKeyboardLayout

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context
__current_exception
_CxxThrowException
__intrinsic_setjmp
__C_specific_handler
memcmp
memchr
memset
memcpy
longjmp
strrchr
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
memmove

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
ftell
fclose
fseek
__stdio_common_vfprintf
_wfopen
__stdio_common_vsprintf
fread
__stdio_common_vsscanf
fflush
_set_fmode
__p__commode
fwrite

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strncpy
strcmp
strncmp
strcpy_s

api-ms-win-crt-heap-l1-1-0

_set_new_mode
malloc
free
_callnewh

api-ms-win-crt-runtime-l1-1-0

terminate
__p___argv
__p___argc
_c_exit
_configure_narrow_argv
_initialize_narrow_environment
_exit
exit
_invalid_parameter_noinfo_noreturn
_initterm_e
_wassert
_initialize_onexit_table
_register_onexit_function
_initterm
_crt_atexit
_register_thread_local_exe_atexit_callback
_get_initial_narrow_environment
_set_app_type
_cexit
_seh_filter_exe

api-ms-win-crt-convert-l1-1-0

atof
strtol

api-ms-win-crt-math-l1-1-0

powf
fmodf
__setusermatherr
cosf
roundf
sin
sinf
ceilf
cos
acosf
sqrtf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 767KB - Virtual size: 767KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72034f7a7ce55a47d15c2a06fbd2cd6e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d11

d3dcompiler_43

kernel32

user32

msvcp140

imm32

d3dx11_43

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 767KB - Virtual size: 767KB

.rdata Size: 232KB - Virtual size: 231KB

.data Size: 2.5MB - Virtual size: 2.5MB

.pdata Size: 36KB - Virtual size: 35KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 767KB - Virtual size: 767KB

.rdata
Size: 232KB - Virtual size: 231KB

.data
Size: 2.5MB - Virtual size: 2.5MB

.pdata
Size: 36KB - Virtual size: 35KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB