d3dim.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ac99ed572dd88aec06aa313a7e119490N.dll
Resource
win10v2004-20240802-en
General
-
Target
ac99ed572dd88aec06aa313a7e119490N
-
Size
451KB
-
MD5
ac99ed572dd88aec06aa313a7e119490
-
SHA1
30517008c905bbe052a6154c518b3de302e5b0fb
-
SHA256
247c4956a56b8128607afc7b7ef0e7007ca65db6a0548b835944b39df9a0a401
-
SHA512
5912b5c768bffea4b03e949691e61c3a26a27130363eb1a834540a5b4d2c90e3c3c334837c4282809c17b68723416f40e1c21f387229ff38657f7d5a23a09d37
-
SSDEEP
6144:1Fe7BkKZYi/cr1WreUrM7cGNsZi8HPe7xdAdP3F/zM9Ei3WxGGyjCihpHyG8t:uxreU8sZi8HPe7xu93F/zZGGyp/8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac99ed572dd88aec06aa313a7e119490N
Files
-
ac99ed572dd88aec06aa313a7e119490N.dll windows:10 windows x86 arch:x86
fdd843b883c805c84c99c2cb471bd489
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
memcpy
_onexit
__dllonexit
_unlock
_lock
??1type_info@@UAE@XZ
_except_handler4_common
_initterm
_amsg_exit
_XcptFilter
_callnewh
malloc
free
fopen
fclose
fflush
fseek
ftell
fwrite
sscanf_s
_purecall
_CIcos
_CIexp
_CIpow
_CIsqrt
_CxxThrowException
_ftol2
_ftol2_sse
memcmp
memset
kernel32
LocalFree
LocalReAlloc
VirtualAlloc
GetCurrentThreadId
LocalAlloc
DeleteCriticalSection
FreeLibrary
InitializeCriticalSection
GetCurrentProcessId
IsProcessorFeaturePresent
DisableThreadLibraryCalls
GetModuleHandleA
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
VirtualFree
user32
IntersectRect
SetRect
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
ddraw
ReleaseDDThreadLock
AcquireDDThreadLock
DDInternalUnlock
D3DParseUnknownCommand
DDInternalLock
Exports
Exports
D3DFree
D3DMalloc
D3DRealloc
Direct3DCreate
Direct3DCreateDevice
Direct3DCreateTexture
Direct3DGetSWRastZPixFmts
Direct3D_HALCleanUp
FlushD3DDevices
FlushD3DDevices2
PaletteAssociateNotify
PaletteUpdateNotify
SurfaceFlipNotify
Sections
.text Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ