ShaderGlass[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ShaderGlass.exe
Size

20.4MB
MD5

bc513fb03ce4f62434506c3ecfaefd1d
SHA1

a7de2fcc56cdf8ac229a7ae9dd53f453eb8e320f
SHA256

0261612d914f1b0713dde4d4479050fe475aa370d563bf5308b81edbeb115e97
SHA512

38e63ebba166772e3004c0de1e5aa38c03c539899ca2fe5a37e4b3f989430c32e3824ed6d5257d9a65d2e7565bdf12ac31209914b6c9e521fa40114efbcc1f59
SSDEEP

393216:U12+niMjOyd0Kc+jHsrL4iJWzvjLdBV0XU:y28nz02cL4iYzfdB3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ShaderGlass.exe

Files

ShaderGlass.exe
.exe windows:6 windows x64 arch:x64

4c162bce2b10acebb7bb890c69a8b6f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

G:\Personal\ShaderGlass\x64\Release\ShaderGlass.pdb

Imports

comctl32

ImageList_Add
ImageList_GetImageCount
InitCommonControlsEx
ImageList_Create

dwmapi

DwmGetWindowAttribute

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW

api-ms-win-ntuser-sysparams-l1-1-0

GetSystemMetrics
EnumDisplayMonitors
SystemParametersInfoW
GetMonitorInfoW

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
GetModuleFileNameW
LoadStringW
GetModuleHandleExW
FreeLibrary
LoadLibraryExW
GetProcAddress

d3d11

CreateDirect3D11DeviceFromDXGIDevice
D3D11CreateDevice

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-file-l1-1-0

CreateFileW
DeleteFileW
WriteFile
FlushFileBuffers
SetEndOfFile
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
SetFilePointerEx
ReadFile
GetFileSizeEx

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler
CoCreateInstance
PropVariantClear

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetLastError
RaiseException

d3dcompiler_47

D3DCompile

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
OutputDebugStringA

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegGetValueW

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineW
SetStdHandle
GetStdHandle

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW

user32

RegisterHotKey
ModifyMenuW
LoadMenuW
IsWindow
PostQuitMessage
UnregisterHotKey
ScreenToClient
GetCursorPos
SetForegroundWindow
GetMenuState
SetMenu
OffsetRect
CopyRect
SetWindowDisplayAffinity
GetMenu
AdjustWindowRect
SetWindowLongW
DeleteMenu
CreatePopupMenu
GetSubMenu
InsertMenuW
MonitorFromWindow
ValidateRect
AppendMenuW
RemoveMenu
EnumWindows
GetWindowLongW
SetWindowLongPtrW
GetWindowLongPtrW
LoadIconW
LoadCursorW
GetSysColorBrush
RegisterClassExW
GetDpiForSystem
AdjustWindowRectEx
CreateWindowExW
ShowWindow
UpdateWindow
SetWindowPos
GetClientRect
LoadBitmapW
SendMessageW
PostMessageW
DefWindowProcW
EnumDisplaySettingsW
SetTimer
KillTimer
SetWindowTextW
GetDlgItem
SendDlgItemMessageW
MessageBoxW
EndDialog
DialogBoxParamW
SetProcessDpiAwarenessContext
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetScrollInfo
ScrollWindow
SetScrollInfo
EnableScrollBar
DestroyWindow
SetWindowTextA
GetDlgCtrlID
ClientToScreen
GetWindowRect
GetAncestor
GetLastActivePopup
GetWindowTextLengthW
GetWindowTextW
CheckMenuItem
CheckMenuRadioItem
EnableMenuItem
GetTitleBarInfo

gdi32

DeleteObject
CreateSolidBrush
CreateFontIndirectW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

shell32

ShellExecuteW

api-ms-win-core-synch-l1-1-0

EnterCriticalSection
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
TerminateProcess
GetStartupInfoW
GetCurrentProcessId
GetCurrentProcess
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc

api-ms-win-core-localization-l1-2-0

IsValidLocale
FormatMessageW
GetOEMCP
GetACP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
GetLocaleInfoW
LCMapStringW
LCMapStringEx
GetCPInfo

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-fibers-l1-1-0

FlsFree
FlsAlloc
FlsSetValue
FlsGetValue

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlVirtualUnwind
RtlUnwindEx

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead
InterlockedPushEntrySList

api-ms-win-core-heap-l1-1-0

HeapReAlloc
HeapSize
GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-console-l1-1-0

WriteConsoleW
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP

oleaut32

SysFreeString
GetErrorInfo
SetErrorInfo
SysAllocString
SysStringLen

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17.3MB - Virtual size: 17.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4c162bce2b10acebb7bb890c69a8b6f7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

dwmapi

api-ms-win-core-string-l1-1-0

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

d3d11

api-ms-win-core-handle-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-errorhandling-l1-1-0

d3dcompiler_47

api-ms-win-core-debug-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-shcore-obsolete-l1-1-0

user32

gdi32

comdlg32

shell32

api-ms-win-core-synch-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-fibers-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-console-l1-1-0

oleaut32

api-ms-win-core-libraryloader-l1-2-1

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.rdata Size: 17.3MB - Virtual size: 17.3MB

.data Size: 36KB - Virtual size: 43KB

.pdata Size: 28KB - Virtual size: 27KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 139KB - Virtual size: 139KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 17.3MB - Virtual size: 17.3MB

.data
Size: 36KB - Virtual size: 43KB

.pdata
Size: 28KB - Virtual size: 27KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 139KB - Virtual size: 139KB

.reloc
Size: 6KB - Virtual size: 5KB