c:\LcsWorkFile\DqSrc\binR\d3d8thk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f61bbaf8dc8ba5434f55b030e7e8935e6233558e97ca0d50ef920c2393e9e54e.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
f61bbaf8dc8ba5434f55b030e7e8935e6233558e97ca0d50ef920c2393e9e54e.dll
Resource
win10v2004-20240426-en
General
-
Target
f61bbaf8dc8ba5434f55b030e7e8935e6233558e97ca0d50ef920c2393e9e54e
-
Size
14KB
-
MD5
2719ef5d6f09796bd73033584e65b07e
-
SHA1
fc2f96ffd0198d897953d86571f4e308e7c8ee57
-
SHA256
f61bbaf8dc8ba5434f55b030e7e8935e6233558e97ca0d50ef920c2393e9e54e
-
SHA512
20d2b83b8009d026ebc83825b74f6e9a6d4bbb0bcf5ebf30540ae62ba2fa0193f88712488ee5cd13c8686c46170c6634f1b6052a9cb7e259a1478826ccd13e7b
-
SSDEEP
384:1b7yrx51v+m7NlTKqjW0RSoHgAyuc0U0IyE:V6jTPzjDzysI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f61bbaf8dc8ba5434f55b030e7e8935e6233558e97ca0d50ef920c2393e9e54e
Files
-
f61bbaf8dc8ba5434f55b030e7e8935e6233558e97ca0d50ef920c2393e9e54e.dll windows:5 windows x86 arch:x86
25ea79247b3cc708517f1b8aafc9c617
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
ExitProcess
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetSystemDirectoryA
lstrcatA
GetShortPathNameA
GetLastError
GetProcAddress
DisableThreadLibraryCalls
GetPrivateProfileStringA
LoadLibraryA
GetModuleFileNameA
OutputDebugStringA
CloseHandle
OpenFileMappingA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcess
user32
MessageBoxA
wsprintfA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
shlwapi
PathFindFileNameA
msvcr90
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
free
_malloc_crt
_encode_pointer
vsprintf_s
_encoded_null
memset
Exports
Exports
OsThunkD3dContextCreate
OsThunkD3dContextDestroy
OsThunkD3dContextDestroyAll
OsThunkD3dDrawPrimitives2
OsThunkD3dValidateTextureStageState
OsThunkDdAddAttachedSurface
OsThunkDdAlphaBlt
OsThunkDdAttachSurface
OsThunkDdBeginMoCompFrame
OsThunkDdBlt
OsThunkDdCanCreateD3DBuffer
OsThunkDdCanCreateSurface
OsThunkDdColorControl
OsThunkDdCreateD3DBuffer
OsThunkDdCreateDirectDrawObject
OsThunkDdCreateMoComp
OsThunkDdCreateSurface
OsThunkDdCreateSurfaceEx
OsThunkDdCreateSurfaceObject
OsThunkDdDeleteDirectDrawObject
OsThunkDdDeleteSurfaceObject
OsThunkDdDestroyD3DBuffer
OsThunkDdDestroyMoComp
OsThunkDdDestroySurface
OsThunkDdEndMoCompFrame
OsThunkDdFlip
OsThunkDdFlipToGDISurface
OsThunkDdGetAvailDriverMemory
OsThunkDdGetBltStatus
OsThunkDdGetDC
OsThunkDdGetDriverInfo
OsThunkDdGetDriverState
OsThunkDdGetDxHandle
OsThunkDdGetFlipStatus
OsThunkDdGetInternalMoCompInfo
OsThunkDdGetMoCompBuffInfo
OsThunkDdGetMoCompFormats
OsThunkDdGetMoCompGuids
OsThunkDdGetScanLine
OsThunkDdLock
OsThunkDdLockD3D
OsThunkDdQueryDirectDrawObject
OsThunkDdQueryMoCompStatus
OsThunkDdReenableDirectDrawObject
OsThunkDdReleaseDC
OsThunkDdRenderMoComp
OsThunkDdResetVisrgn
OsThunkDdSetColorKey
OsThunkDdSetExclusiveMode
OsThunkDdSetGammaRamp
OsThunkDdSetOverlayPosition
OsThunkDdUnattachSurface
OsThunkDdUnlock
OsThunkDdUnlockD3D
OsThunkDdUpdateOverlay
OsThunkDdWaitForVerticalBlank
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 866B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ