C:\fivemm\d3d10.pdb
Static task
static1
1 signatures
General
-
Target
d3d10.dll
-
Size
903KB
-
MD5
cd60da32f610588c60299adf5e647a7d
-
SHA1
051cc40c887b402c8df5118a767071b67ee47f33
-
SHA256
7909d22820d90979bfc4ad83b3bbbeb96519f82c1270995d1ad2920e593b9688
-
SHA512
0578e8e9871a4dc6bf4482b6eb30e061647e4fa1d49c29b6e12696dac66a67d0d5be044b8d582b372fb9c8ab4d75acbac1253e33037108fbc0187f1183630219
-
SSDEEP
12288:lmM7slvRv7lq4rLuCU45qf2/Z2/asRPrb2A/fUxCj2AqeMQmpnYt4:lmMcvRvRuCU4s2h6aGz7fuGKFpnYt
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3d10.dll
Files
-
d3d10.dll.dll windows:6 windows x64 arch:x64
ad2b656e676cbb00c688ce97ba3a2f68
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlVirtualUnwind
WakeAllConditionVariable
OutputDebugStringW
AcquireSRWLockExclusive
OpenProcess
GetFileSizeEx
CreateFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SleepConditionVariableSRW
WaitForMultipleObjects
GetCurrentProcessId
ReadFile
GetFileType
GetStdHandle
GetEnvironmentVariableA
WaitForSingleObjectEx
MoveFileExA
GetTickCount
VerifyVersionInfoA
GetSystemDirectoryA
SleepEx
LeaveCriticalSection
EnterCriticalSection
FormatMessageA
SetLastError
GetCurrentProcess
Sleep
CloseHandle
IsDebuggerPresent
FindFirstFileA
FindNextFileA
FindClose
VirtualProtect
InitializeCriticalSectionEx
GetLastError
PeekNamedPipe
DeleteCriticalSection
WriteProcessMemory
GlobalUnlock
WideCharToMultiByte
GlobalLock
GetModuleHandleA
GlobalFree
GlobalAlloc
QueryPerformanceCounter
FreeLibrary
VerSetConditionMask
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
MultiByteToWideChar
ReleaseSRWLockExclusive
user32
CloseClipboard
EmptyClipboard
mouse_event
OpenClipboard
SetWindowLongPtrA
SetClipboardData
GetKeyState
CallWindowProcA
GetAsyncKeyState
LoadCursorA
ScreenToClient
GetSystemMetrics
GetClipboardData
GetCapture
ClientToScreen
TrackMouseEvent
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
IsWindowUnicode
ReleaseCapture
SetCursorPos
GetCursorPos
d3dcompiler_43
D3DCompile
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext
msvcp140
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Xtime_get_ticks
_Query_perf_counter
_Thrd_sleep
_Query_perf_frequency
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
d3dx9_43
D3DXVec3Transform
ws2_32
getsockopt
select
__WSAFDIsSet
recvfrom
sendto
getaddrinfo
gethostname
ioctlsocket
listen
htonl
accept
WSACleanup
WSAStartup
WSAIoctl
WSASetLastError
socket
setsockopt
ntohs
htons
ntohl
getsockname
getpeername
connect
bind
WSAGetLastError
closesocket
send
recv
freeaddrinfo
normaliz
IdnToAscii
wldap32
ord200
ord143
ord217
ord46
ord301
ord211
ord60
ord45
ord50
ord41
ord22
ord26
ord27
ord32
ord33
ord30
ord35
ord79
crypt32
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertFindExtension
CertAddCertificateContextToStore
CertOpenStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertGetNameStringA
vcruntime140_1
__CxxFrameHandler4
vcruntime140
strrchr
__std_type_info_destroy_list
memmove
memset
__current_exception_context
__current_exception
memcpy
memcmp
memchr
_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
strchr
strstr
__std_terminate
api-ms-win-crt-stdio-l1-1-0
_read
fopen
fputs
_write
_close
_open
_get_stream_buffer_pointers
_fseeki64
ftell
fsetpos
ungetc
setvbuf
fgetpos
__acrt_iob_func
feof
fflush
fclose
fgetc
fputc
fseek
__stdio_common_vfprintf
fwrite
_lseeki64
_wfopen
__stdio_common_vsprintf
fgets
__stdio_common_vsscanf
fread
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-string-l1-1-0
strncmp
strcpy_s
strncpy
_strdup
strcmp
strspn
strpbrk
tolower
isupper
isdigit
strcspn
api-ms-win-crt-heap-l1-1-0
realloc
malloc
calloc
free
_callnewh
api-ms-win-crt-convert-l1-1-0
strtof
strtoul
strtol
atoi
strtoll
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_getpid
terminate
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
_crt_atexit
_errno
_beginthreadex
_execute_onexit_table
_register_onexit_function
__sys_nerr
strerror
_initialize_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
api-ms-win-crt-filesystem-l1-1-0
_access
_unlink
_fstat64
_lock_file
_stat64
_unlock_file
_stat64i32
_wmkdir
api-ms-win-crt-math-l1-1-0
fmodf
atan2f
pow
ceilf
cosf
asinf
sqrtf
sinf
acosf
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64
advapi32
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
CryptReleaseContext
CryptAcquireContextA
CryptGetHashParam
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ