d3d10[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
d3d10.dll
Size 847KB
Sample240608-r8plascf3s
SHA256 e75be80f40952603ba6564ab81a1d0e5b6b85587812052e357833b07ae4336dd
MD5 929e0f33b9ea62970ef0191078f4e557
SHA1 1373288d362e4067c783817b225fa2690e3479c5
SHA512 5d221b471d94bd13a728ce4e7f7a15ae44ca0aa8df73d828e8bfb515bfa0ef841bb75baad41480ef469b21945c3a1c7ae4bf9f80913a91f3490b98c3e3fb6642
SSDEEP 24576:MAzTDo20GYxkHXx+mnmptl7do60OegX7Ao:ZM25DHXZnmdD0Erv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3d10.dll

File Explorer

d3d10.dll

.dll 847KB

d3d10.dll

IMPHASH e310afaa49e26c8c0733a5ff0dfa153a
SHA256 e75be80f40952603ba6564ab81a1d0e5b6b85587812052e357833b07ae4336dd
MD5 929e0f33b9ea62970ef0191078f4e557
SHA1 1373288d362e4067c783817b225fa2690e3479c5
SHA512 5d221b471d94bd13a728ce4e7f7a15ae44ca0aa8df73d828e8bfb515bfa0ef841bb75baad41480ef469b21945c3a1c7ae4bf9f80913a91f3490b98c3e3fb6642
SSDEEP 24576:MAzTDo20GYxkHXx+mnmptl7do60OegX7Ao:ZM25DHXZnmdD0Erv
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

362948

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\User\AppData\Local\FiveM\FiveM.app\plugins\d3d10.pdb

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z ?_Xbad_alloc@std@@YAXXZ _Query_perf_counter _Query_perf_frequency ??Bios_base@std@@QEBA_NXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Xlength_error@std@@YAXPEBD@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?_Throw_Cpp_error@std@@YAXH@Z _Mtx_unlock _Mtx_lock _Mtx_destroy_in_situ _Mtx_init_in_situ ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

user32

SetClipboardData GetClipboardData EmptyClipboard TrackMouseEvent GetKeyState GetCapture SetCapture ReleaseCapture IsWindowUnicode GetForegroundWindow GetClientRect SetCursorPos OpenClipboard GetCursorPos ClientToScreen ScreenToClient LoadCursorA GetSystemMetrics CallWindowProcA ShowWindow SetWindowLongPtrA IsWindowVisible GetWindowTextA EnumWindows GetWindow CloseClipboard SetCursor GetWindowThreadProcessId

kernel32

OutputDebugStringW InitializeSListHead GetSystemTimeAsFileTime TerminateProcess IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive DeleteCriticalSection InitializeCriticalSectionEx FreeConsole AllocConsole GetConsoleWindow FreeLibraryAndExitThread DisableThreadLibraryCalls Thread32Next Thread32First CreateToolhelp32Snapshot VirtualProtect FlushInstructionCache SetThreadContext GetThreadContext ResumeThread SuspendThread OpenThread GetCurrentThreadId GetCurrentProcessId GetCurrentProcess Sleep HeapFree HeapReAlloc HeapAlloc HeapCreate GetLastError VirtualQuery VirtualFree VirtualAlloc GetSystemInfo QueryPerformanceFrequency QueryPerformanceCounter FreeLibrary LoadLibraryA GetProcAddress GetModuleHandleA CloseHandle WideCharToMultiByte MultiByteToWideChar GlobalFree GlobalLock GlobalUnlock GlobalAlloc

imm32

ImmGetContext ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow

d3dcompiler_43

D3DCompile

d3dx9_43

D3DXMatrixTranspose D3DXVec3Transform

d3d11

D3D11CreateDeviceAndSwapChain

vcruntime140

__current_exception_context __std_type_info_destroy_list __current_exception __C_specific_handler __std_exception_copy __std_exception_destroy _CxxThrowException memchr memcmp memcpy memmove memset __std_terminate strstr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _execute_onexit_table _initterm_e _register_onexit_function _initterm _initialize_onexit_table _initialize_narrow_environment terminate _configure_narrow_argv _seh_filter_dll abort exit _invalid_parameter_noinfo_noreturn _beginthreadex _cexit

api-ms-win-crt-math-l1-1-0

powf pow logf log atan2f _hypotf acosf sinf cosf sqrtf ceilf fmodf

api-ms-win-crt-string-l1-1-0

strcpy_s strncpy strncmp strcmp

api-ms-win-crt-stdio-l1-1-0

fflush fopen_s fread_s __stdio_common_vsprintf_s fclose _wfopen fread fseek ftell fwrite __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsscanf __acrt_iob_func

api-ms-win-crt-heap-l1-1-0

_callnewh free malloc

api-ms-win-crt-utility-l1-1-0

qsort rand

api-ms-win-crt-convert-l1-1-0

atof