example_win32_directx11[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
example_win32_directx11.exe
Size 2.2MB
Sample260720-zdyvgset2p
SHA256 4e618ccac759bcfb1d33a866fdcbeda041ac8480005f34497ea09f3faeca33b6
MD5 6a9ca39f9a1733c8f1473851b5cc2ceb
SHA1 6e2cae8cf705143369431852c01b688973fa5a50
SHA512 08f29ce31dfb3a8eb672bb1f4f5579ca48c53446b03b392840036baae45945e11c8da4cbd6f7d338e94d06d382d046b6ec4768577a3f71a2d98b793d5b375d59
SSDEEP 49152:PA8Rkl3pd5wSQKORXu1RjYrCLHrOlLaiytznt3LAArLT/AWgsLmsI:Ilv/RjYrCLHrOlLaiw1A8BmsI
TLSH
T175B5DF1BB3F542ECD1B79138C6969717E77234050320A6DB23A04AA46F637E06F7BB91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
example_win32_directx11.exe

File Explorer

example_win32_directx11.exe

.exe 2.2MB

example_win32_directx11.exe

IMPHASH dbff1339f0069f7c44ec0e0484dc2906
SHA256 4e618ccac759bcfb1d33a866fdcbeda041ac8480005f34497ea09f3faeca33b6
MD5 6a9ca39f9a1733c8f1473851b5cc2ceb
SHA1 6e2cae8cf705143369431852c01b688973fa5a50
SHA512 08f29ce31dfb3a8eb672bb1f4f5579ca48c53446b03b392840036baae45945e11c8da4cbd6f7d338e94d06d382d046b6ec4768577a3f71a2d98b793d5b375d59
SSDEEP 49152:PA8Rkl3pd5wSQKORXu1RjYrCLHrOlLaiytznt3LAArLT/AWgsLmsI:Ilv/RjYrCLHrOlLaiw1A8BmsI
TLSH
T175B5DF1BB3F542ECD1B79138C6969717E77234050320A6DB23A04AA46F637E06F7BB91
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1041072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\junsu\Downloads\ai-aimassist-source\ai-aimassist-source\example_win32_directx11\Release\example_win32_directx11.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

opencv_world470

?format@cv@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBDZZ ?minMaxLoc@cv@@YAXAEBV_InputArray@1@PEAN1PEAV?$Point_@H@1@20@Z ?useOpenCL@ocl@cv@@YA_NXZ ?haveOpenCL@ocl@cv@@YA_NXZ ??0Mat@cv@@QEAA@HHHPEAX_K@Z ??0_InputArray@cv@@QEAA@AEBVMatExpr@1@@Z ?rectangle@cv@@YAXAEBV_InputOutputArray@1@V?$Point_@H@1@1AEBV?$Scalar_@N@1@HHH@Z ?blobFromImage@dnn4_v20221220@dnn@cv@@YAXAEBV_InputArray@3@AEBV_OutputArray@3@NAEBV?$Size_@H@3@AEBV?$Scalar_@N@3@_N4H@Z ?blobFromImage@dnn4_v20221220@dnn@cv@@YA?AVMat@3@AEBV_InputArray@3@NAEBV?$Size_@H@3@AEBV?$Scalar_@N@3@_N3H@Z ?readNetFromDarknet@dnn4_v20221220@dnn@cv@@YA?AVNet@123@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z ?NMSBoxes@dnn4_v20221220@dnn@cv@@YAXAEBV?$vector@V?$Rect_@H@cv@@V?$allocator@V?$Rect_@H@cv@@@std@@@std@@AEBV?$vector@MV?$allocator@M@std@@@5@MMAEAV?$vector@HV?$allocator@H@std@@@5@MH@Z ??0Net@dnn4_v20221220@dnn@cv@@QEAA@XZ ?empty@Net@dnn4_v20221220@dnn@cv@@QEBA_NXZ ?getLayerNames@Net@dnn4_v20221220@dnn@cv@@QEBA?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ ?forward@Net@dnn4_v20221220@dnn@cv@@QEAAXAEBV_OutputArray@4@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z ?setPreferableBackend@Net@dnn4_v20221220@dnn@cv@@QEAAXH@Z ?setPreferableTarget@Net@dnn4_v20221220@dnn@cv@@QEAAXH@Z ?setInput@Net@dnn4_v20221220@dnn@cv@@QEAAXAEBV_InputArray@4@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NAEBV?$Scalar_@N@4@@Z ?getUnconnectedOutLayers@Net@dnn4_v20221220@dnn@cv@@QEBA?AV?$vector@HV?$allocator@H@std@@@std@@XZ ?putText@cv@@YAXAEBV_InputOutputArray@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$Point_@H@1@HNV?$Scalar_@N@1@HH_N@Z ?noArray@cv@@YAAEBV_InputOutputArray@1@XZ ??0Mat@cv@@QEAA@AEBV01@AEBVRange@1@1@Z ?convertTo@Mat@cv@@QEBAXAEBV_OutputArray@2@HNN@Z ?zeros@Mat@cv@@SA?AVMatExpr@2@HHH@Z ?imshow@cv@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV_InputArray@1@@Z ?waitKey@cv@@YAHH@Z ??1Net@dnn4_v20221220@dnn@cv@@QEAA@XZ ??0Mat@cv@@QEAA@AEBV01@@Z ??0Mat@cv@@QEAA@XZ ??1Mat@cv@@QEAA@XZ ??4Mat@cv@@QEAAAEAV01@AEBV01@@Z ?setUseOpenCL@ocl@cv@@YAX_N@Z

ws2_32

WSAStartup inet_ntop WSASetLastError ntohs inet_pton WSAGetLastError getpeername getsockname closesocket WSAWaitForMultipleEvents WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent WSACleanup htons recv getsockopt setsockopt bind socket WSAIoctl __WSAFDIsSet select accept htonl getaddrinfo freeaddrinfo recvfrom sendto ioctlsocket gethostname send connect listen

crypt32

CertCloseStore CertOpenStore CertFindCertificateInStore CertFreeCertificateChain CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertGetNameStringW CertFindExtension CertAddCertificateContextToStore CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryW CertFreeCertificateContext CertEnumCertificatesInStore

advapi32

CopySid CryptEncrypt GetTokenInformation GetLengthSid CryptImportKey CryptDestroyKey SystemFunction036 CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW SetSecurityInfo RegDeleteKeyA RegCreateKeyExA InitializeAcl AddAccessAllowedAce ConvertSidToStringSidA IsValidSid OpenProcessToken

kernel32

GetFileAttributesExW GetFileSizeEx VerifyVersionInfoW GetCurrentProcessId WaitForMultipleObjects PeekNamedPipe ReadFile GetFileType FindFirstFileW FindClose CreateDirectoryW SetFileInformationByHandle CreateFile2 AreFileApisANSI GetFileInformationByHandleEx WakeAllConditionVariable SetUnhandledExceptionFilter GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent OutputDebugStringW GetCurrentDirectoryW GetCurrentThreadId SleepConditionVariableSRW GetLocaleInfoEx FormatMessageA VirtualFree VirtualAlloc LoadLibraryA GetProcAddress GetModuleFileNameW Sleep CreateThread HeapFree GetCurrentProcess InitializeCriticalSectionEx HeapSize GetLastError HeapReAlloc CloseHandle HeapAlloc HeapDestroy LocalFree DeleteCriticalSection GetProcessHeap GetModuleHandleA MultiByteToWideChar QueryPerformanceFrequency VerSetConditionMask FreeLibrary QueryPerformanceCounter GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock AllocConsole CreateFileW AddVectoredExceptionHandler VirtualProtect CreateFileMappingW MapViewOfFile UnmapViewOfFile GetModuleFileNameA GetModuleHandleW QueryFullProcessImageNameW SetLastError FormatMessageW ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetSystemDirectoryW LoadLibraryW SleepEx GetSystemInfo GetTickCount MoveFileExW WaitForSingleObjectEx GetEnvironmentVariableA GetStdHandle

user32

ShowWindow MoveWindow CreateWindowExA SetLayeredWindowAttributes DestroyWindow GetWindowRect TranslateMessage LoadIconA PeekMessageA PostQuitMessage RegisterClassExA UpdateWindow OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData GetKeyState LoadCursorA DefWindowProcW ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetForegroundWindow SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos UnregisterClassA GetWindowDC GetDesktopWindow GetCursorInfo MessageBoxA GetAsyncKeyState GetSystemMetrics DispatchMessageA

gdi32

DeleteObject DeleteDC GetDIBits CreateCompatibleDC SelectObject CreateCompatibleBitmap BitBlt

shell32

ShellExecuteA

msvcp140

?_Xbad_function_call@std@@YAXXZ ?_Random_device@std@@YAIXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ??7ios_base@std@@QEBA_NXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Winerror_map@std@@YAHH@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Throw_Cpp_error@std@@YAXH@Z _Cnd_do_broadcast_at_thread_exit _Thrd_detach _Query_perf_frequency _Query_perf_counter _Xtime_get_ticks ?_Xinvalid_argument@std@@YAXPEBD@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ??Bios_base@std@@QEBA_NXZ ?good@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?id@?$ctype@D@std@@2V0locale@2@A ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?uncaught_exception@std@@YA_NXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

shlwapi

PathFindFileNameW

userenv

UnloadUserProfile

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmSetCandidateWindow ImmReleaseContext ImmSetCompositionWindow ImmGetContext

xinput1_3

ord2

psapi

GetModuleInformation

bcrypt

BCryptGenRandom

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException wcschr strstr __C_specific_handler __std_terminate memchr __std_exception_destroy __current_exception memmove memset strchr __current_exception_context strrchr memcmp __std_exception_copy memcpy

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode malloc free realloc calloc

api-ms-win-crt-runtime-l1-1-0

_c_exit exit system _exit _initterm_e _initterm _get_narrow_winmain_command_line terminate _invoke_watson _set_app_type abort _seh_filter_exe _beginthreadex _cexit _crt_atexit __sys_errlist __sys_nerr _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _wassert _resetstkoflw _invalid_parameter_noinfo _errno _register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

_wopen fputs _get_stream_buffer_pointers _fseeki64 fread feof _lseeki64 _read fsetpos ungetc _close fwrite _write ftell __acrt_iob_func fseek __stdio_common_vfprintf _wfopen __stdio_common_vsprintf __stdio_common_vsscanf freopen_s setvbuf fgetc _popen _pclose fgets _set_fmode fclose _fileno fgetpos fflush __p__commode fputc

api-ms-win-crt-time-l1-1-0

clock _gmtime64 _time64 strftime _localtime64

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _wstat64 _lock_file _fstat64 _unlink

api-ms-win-crt-convert-l1-1-0

strtoul atof wcstombs atoi strtol strtoull strtoll strtod

api-ms-win-crt-utility-l1-1-0

qsort rand

api-ms-win-crt-string-l1-1-0

wcsncmp strspn wcsncpy strncmp strcspn _wcsdup wcspbrk strpbrk wcslen strlen strncpy strcmp tolower strcpy_s _strdup

api-ms-win-crt-math-l1-1-0

sinf __setusermatherr cosf powf _dclass ceilf pow _fdopen fmodf logf log sqrtf _dsign acosf ceil

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

localeconv ___lc_codepage_func _configthreadlocale