example_win32_directx11[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
example_win32_directx11.exe
Size 4.2MB
Sample260708-vy5fjsdv3r
SHA256 79df266e47a7e8f526dee651e561bc90b9c162d47a0d0ac8b465981519cadd10
MD5 2d38d3ec90ce6a79df39833d24c56c14
SHA1 0d3a56da37a6b8b32f4ff835b833ddb0b0ff4af0
SHA512 72232cc426e6878997b44c00645300353d407a880be632afb9e1c01de51b8667b763aad7201475ba38c28cb526350c0a0ab64a07987041c2994a5f2d2e9a8b57
SSDEEP 49152:+4gjYEzThD0XFAyLqXC1I+8RcovwLrHtyH0Cthsn2HWkECEwWsGfVaYlyzUAR:VEVgFAnXy8pvwm6nOEEWKzUA
TLSH
T18726AD21A18C979DF062E178DC83962793F17C4D2320CFD766E04EF75E5B998BB69208
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
example_win32_directx11.exe

File Explorer

example_win32_directx11.exe

.exe 4.2MB

example_win32_directx11.exe

IMPHASH f275cbe7caa72060e5619a0db9450c0b
SHA256 79df266e47a7e8f526dee651e561bc90b9c162d47a0d0ac8b465981519cadd10
MD5 2d38d3ec90ce6a79df39833d24c56c14
SHA1 0d3a56da37a6b8b32f4ff835b833ddb0b0ff4af0
SHA512 72232cc426e6878997b44c00645300353d407a880be632afb9e1c01de51b8667b763aad7201475ba38c28cb526350c0a0ab64a07987041c2994a5f2d2e9a8b57
SSDEEP 49152:+4gjYEzThD0XFAyLqXC1I+8RcovwLrHtyH0Cthsn2HWkECEwWsGfVaYlyzUAR:VEVgFAnXy8pvwm6nOEEWKzUA
TLSH
T18726AD21A18C979DF062E178DC83962793F17C4D2320CFD766E04EF75E5B998BB69208
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3093740

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Gabor\Downloads\ImguiMenu\ImguiMenu\thirdparty\imgui\examples\example_win32_directx11\Release\example_win32_directx11.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

kernel32

MultiByteToWideChar QueryPerformanceFrequency FreeLibrary QueryPerformanceCounter GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock Sleep GetModuleHandleW CreateFileA GetFileSizeEx ReadFile HeapAlloc HeapFree MapViewOfFile UnmapViewOfFile CreateFileMappingA GetProcAddress RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetLocaleInfoA CloseHandle LoadLibraryA

user32

DefWindowProcW DestroyWindow CreateWindowExW GetKeyboardLayout GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow SendMessageW GetCursorPos SetCursorPos ReleaseCapture GetAsyncKeyState DispatchMessageW IsWindowUnicode PeekMessageW TranslateMessage PostQuitMessage GetClientRect TrackMouseEvent ClientToScreen GetCapture ScreenToClient GetMessageExtraInfo GetForegroundWindow GetKeyState SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard LoadCursorW UpdateWindow SetCapture SetCursor

shell32

ShellExecuteA

msvcp140

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?good@ios_base@std@@QEBA_NXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?uncaught_exceptions@std@@YAHXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmGetContext ImmReleaseContext

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException __intrinsic_setjmp __C_specific_handler __current_exception_context __current_exception memcmp memchr memset memmove longjmp strrchr strstr __std_terminate __std_exception_copy __std_exception_destroy memcpy

api-ms-win-crt-heap-l1-1-0

free _callnewh _set_new_mode malloc

api-ms-win-crt-runtime-l1-1-0

_initterm_e exit _exit terminate __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _get_initial_narrow_environment _set_app_type _seh_filter_exe _configure_narrow_argv _initterm _invoke_watson _initialize_narrow_environment _wassert _cexit _crt_atexit _register_onexit_function _initialize_onexit_table

api-ms-win-crt-math-l1-1-0

sinf powf cosf ceilf acosf sqrtf fmodf __setusermatherr roundf

api-ms-win-crt-string-l1-1-0

strncmp strcmp strncpy tolower isxdigit

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf __p__commode _set_fmode __stdio_common_vsscanf fread _wfopen fwrite ftell __acrt_iob_func __stdio_common_vsprintf fseek fclose fflush

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-locale-l1-1-0

_configthreadlocale