D:\qb\workspace\21461\source\output\dump32\instrumentation\metrics_library\Release\igdml32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cd5843929b6996edb92afe7257ce94527cac593187879501c2b6622e583962f4.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
cd5843929b6996edb92afe7257ce94527cac593187879501c2b6622e583962f4.dll
Resource
win10v2004-20240611-en
General
-
Target
cd5843929b6996edb92afe7257ce94527cac593187879501c2b6622e583962f4
-
Size
975KB
-
MD5
dd20d8d8b0b7358782cca60486005567
-
SHA1
c87deb06f184ff4d43ff9f7c0142dadb4ea9d2dd
-
SHA256
cd5843929b6996edb92afe7257ce94527cac593187879501c2b6622e583962f4
-
SHA512
0c91188666add4b98fa785afc3cdaa83751c115c444a78c57bcc49c255def30937c4595d3265caab2844f831ae0eb34bc63b9117d4dd1a392a7f04b20412d8e2
-
SSDEEP
24576:+UELLD5NKkNdqNcaNqhNVKAYdPxZ8h4DAGNi2Jkc+XDnQwtLAHvmZRQHE:+H5NKkNdqNcaNqhNIAYdPjDAGNijc+TR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd5843929b6996edb92afe7257ce94527cac593187879501c2b6622e583962f4
Files
-
cd5843929b6996edb92afe7257ce94527cac593187879501c2b6622e583962f4.dll windows:6 windows x86 arch:x86
743ad7292f5fb437db62ac668ae311e0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
QueryPerformanceFrequency
GetCurrentProcessId
GetModuleHandleA
QueryPerformanceCounter
OutputDebugStringA
SetEndOfFile
GetModuleFileNameA
FormatMessageA
WideCharToMultiByte
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LocalFree
GetLocaleInfoEx
MultiByteToWideChar
LCMapStringEx
GetSystemTimePreciseAsFileTime
GetStringTypeW
CompareStringEx
GetCPInfo
WakeAllConditionVariable
SleepConditionVariableSRW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
GetFileSizeEx
SetFilePointerEx
GetCurrentThread
GetStdHandle
GetFileType
HeapAlloc
HeapFree
GetTempPathW
IsThreadAFiber
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CloseHandle
ReadFile
ReadConsoleW
SetConsoleCtrlHandler
HeapReAlloc
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
HeapSize
WriteConsoleW
OutputDebugStringW
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
Exports
Exports
ContextCreate_1_0
ContextDelete_1_0
Sections
.text Size: 831KB - Virtual size: 831KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ