454c0581ba4d60fc6e1bc2a8a6193c7f0b5921c17ffc891a3c185c65b2c49b14
- SHA256 454c0581ba4d60fc6e1bc2a8a6193c7f0b5921c17ffc891a3c185c65b2c49b14
Overview
overview
3Static
static
3d3d9.dll
windows10-2004-x64
3d3d9.dll
windows11-ltsc_2024-x64
3uMod.exe
windows10-2004-x64
3uMod.exe
windows11-ltsc_2024-x64
3uMod_d3d9_DI.dll
windows10-2004-x64
3uMod_d3d9_DI.dll
windows11-ltsc_2024-x64
3uMod_d3d9_HI.dll
windows10-2004-x64
3uMod_d3d9_HI.dll
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d3d9.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d3d9.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
uMod.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
uMod.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
uMod_d3d9_DI.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
uMod_d3d9_DI.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
uMod_d3d9_HI.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
uMod_d3d9_HI.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 454c0581ba4d60fc6e1bc2a8a6193c7f0b5921c17ffc891a3c185c65b2c49b14
- Size 1.5MB
- Sample260723-wpyr3stgrd
- SHA256 454c0581ba4d60fc6e1bc2a8a6193c7f0b5921c17ffc891a3c185c65b2c49b14
- MD5 3e32216c15a54dfab51d76865a451932
- SHA1 dcbd61c01a241648f0e0ca257fb630cbe0d2479a
- SHA512 ed323c65813b3873c26df524437798d3ec66e04d432f9a3170abfbff7cf99d3161182139ce2f244a05114d34c6a3ea6902d376ab56b2c94df2b343576f6b4eca
- SSDEEP 24576:wHyDYoVNARbrvGQ0G05Wxr3exD0sICL5hoOEtAob3RJchw3mkHr+HBxl8D3Cj4ga:MyDYFvD0N453euY1lEOob38PkH00WrIR
- TLSH T1B5753382F909B575DD9C8BB0D70223BA611C61838E97047F9907FCB214B9970E35B7AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/d3d9.dll unpack001/uMod.exe unpack001/uMod_d3d9_DI.dll unpack001/uMod_d3d9_HI.dll
File Explorer
-
454c0581ba4d60fc6e1bc2a8a6193c7f0b5921c17ffc891a3c185c65b2c49b14.zip 1.5MB
-
README_English.txt5KB
-
d3d9.dll.dll 120KB
-
languages/Example_uMod_LanguagePack_English.txt3KB
-
uMod.exe.exe 3.1MB
-
uMod_Settings.txt128B
-
uMod_d3d9_DI.dll.dll 122KB
-
uMod_d3d9_HI.dll.dll 126KB
README_English.txt
- SHA256 cf341131d4d10ca91defd778276f226a61c29fe46a99e868b878907c1ef1324a
- MD5 506ed894ee632bcd1ee2635d13ed0cdf
- SHA1 d92763ecca48af02e6825471ec8d0efd2c8a5274
- SHA512 e1946f3930985f617261f892e3222c0aade6a69adf423419242fdd599642b10406e0ab6da44a5fda5b6779aaeba3175cc3a32a516581471e2948d4ef67ef1547
- SSDEEP 96:m3l0JKbFcOI+wxw6uGJxx0J1enmb4OfkCvTMkHdAFeHglY29wUS1ScmVdAd2bL7j:yKa6uG270eggcA2bL74o
- TLSH T1E3B1621FAB4683B3093619B0220D76C2E715C56B9339C1E275BD2509A3F05B7A6B37CE
- MD5 SHA1 SHA512 SSDEEP TLSH
d3d9.dll
- IMPHASH f1d3e695cc8627ac3127327020309a24
- SHA256 6b31ebcd3153276d01ef9e5eb70675b8ed1889b471bce5af4b864fc9ca15a3e0
- MD5 56b75871bd219c03d6258174c1758a03
- SHA1 e2fdf1cf9b79517eafa5396df8106826c638709b
- SHA512 4da5f4338596c0974b3700ea1a10b5409f96e37ffa9d13298bf22cb759cd7d72b2b752c492f9e6cb7d5efe6c50a261b3c90f52bb129bd5957f6b3f1e65393c20
- SSDEEP 1536:hIUWBad3bqrc/sMwK+cwovwN2Lrk/+0qIYO9L3Kq/vvVp3fdpRs+lwnHYnvI8k09:hEBadL2MBwKwjRsPA4mSX9WTcH
- TLSH T1D0C36C2133A2C0B2C59B643C843ED76B67AE763147F444C77B942B796E703D09AB6386
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
37989
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d3dx9_43
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateTextureFromFileInMemoryEx
D3DXSaveTextureToFileW
D3DXCreateFontA
user32
GetAsyncKeyState
kernel32
InterlockedDecrement
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetStringTypeW
ExitProcess
LoadLibraryA
GetSystemDirectoryA
GetProcAddress
GetModuleFileNameW
GetModuleHandleA
CreateThread
DisableThreadLibraryCalls
FreeLibrary
CloseHandle
WaitForSingleObject
ReleaseMutex
CreateMutexA
WriteFile
CreateFileW
DisconnectNamedPipe
GetLastError
ReadFile
RtlUnwind
GetCurrentThreadId
DecodePointer
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
SetFilePointer
Sleep
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
IsProcessorFeaturePresent
HeapReAlloc
LoadLibraryW
LCMapStringW
Direct3DCreate9
Direct3DCreate9Ex
Name
.text
Size
89KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=158, productName=VS2010 build 30319, version=30319,
count=126, id=170, productName=VS2010 build 30319, version=30319,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, version=21202,
count=92, id=1, productName=Unmarked objects,
count=55, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
languages/Example_uMod_LanguagePack_English.txt
- SHA256 f286cae34c309c5a5dd4a6f37b033e6d36e679effa124e9cf0cabb7a9f65743f
- MD5 2c773322f4f4f3174a9bca7b82dff2b9
- SHA1 9c98d02b0e740186c24f4e9f1ac0b95b96eb30b2
- SHA512 5da84e2f8cbfce417d765d118273156c5f80739ca83127055f23c1700083fab4ce9716c8c89a63466c03cf05b5de17ea8d27907f43e9a32b0726c8a4ce58e5b4
- TLSH T1D281B74ED3F3876746F2196E7305B8A2871191EB9F324A4D389C928E17A505CCAB394B
- MD5 SHA1 SHA512 TLSH
uMod.exe
- IMPHASH cca04be2094f27d6b812e3dbafd0ab22
- SHA256 8b68d6269469d8735c405de12c9552c20ff3e934b70120d8f1c6256d6965d58f
- MD5 720e85c3032e6ccab7e0128857f25d39
- SHA1 c034bf16f0010f9decbbc0038751682cd329c2ca
- SHA512 317b830ee3d579b1950230271c7cb40c5bb30513de9ee7ee363d4ddd034b1b15aed57f7379c8d93de045ee6e508f8f92aec4325c719700ef96adaa8993a2677f
- SSDEEP 49152:hW4OUaIgWI2dwgwc2sbv5SQam5cUhUsjcTigtzwNTjb4:hW4Obkd+c2sboeHgtzw
- TLSH T133E57C01FBDB80B6D9B756B415E1A32E052ABDA527384AD7D3501F9F69323C29D3230E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
1813838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Code\uMod\Code_V1\uMod_GUI\obj\uMod_GUI.pdb
kernel32
GetOEMCP
GetTickCount
QueryPerformanceCounter
SetHandleCount
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetTimeZoneInformation
GetFullPathNameW
LCMapStringW
InitializeCriticalSectionAndSpinCount
SetStdHandle
ExitThread
GetConsoleMode
GetConsoleCP
DeleteFileW
GetDateFormatW
GetTimeFormatW
HeapReAlloc
GetSystemTimeAsFileTime
GetStartupInfoW
HeapSetInformation
GetCommandLineA
EncodePointer
DecodePointer
RtlUnwind
GetStringTypeW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetLocaleInfoA
EnumSystemLocalesA
CompareStringW
SetEndOfFile
IsBadStringPtrA
IsBadReadPtr
RaiseException
GetCurrentThread
FindNextFileW
GetLogicalDriveStringsW
GetDriveTypeW
InterlockedExchange
CreateThread
SetEvent
WaitForMultipleObjects
ExpandEnvironmentStringsW
GetTempFileNameW
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileW
FindClose
OutputDebugStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
GetACP
GetTempPathW
TerminateProcess
IsValidCodePage
GetCPInfo
GetCurrentProcessId
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
LocalFree
CopyFileW
GetFileType
GetExitCodeThread
TlsAlloc
TlsFree
GetCurrentProcess
TlsGetValue
TerminateThread
SetThreadPriority
ExitProcess
TlsSetValue
InterlockedDecrement
InterlockedIncrement
Sleep
DebugBreak
SetCurrentDirectoryW
GlobalSize
HeapSize
GlobalFree
GlobalAlloc
GlobalUnlock
GlobalLock
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetErrorMode
SetConsoleCursorPosition
FillConsoleOutputCharacterW
WriteConsoleW
WriteConsoleA
GetStdHandle
GetConsoleScreenBufferInfo
ReadConsoleOutputCharacterA
FreeConsole
GetVersionExW
GetCommandLineW
GetCurrentThreadId
SetLastError
MulDiv
FlushFileBuffers
DisconnectNamedPipe
CreateNamedPipeW
ConnectNamedPipe
CreateMutexW
CreateProcessW
ResumeThread
GetLastError
FormatMessageW
FreeLibrary
LoadLibraryW
GetProcAddress
GetProcessHeap
HeapAlloc
VirtualAllocEx
VirtualProtectEx
WriteProcessMemory
FlushInstructionCache
HeapFree
CreateRemoteThread
WaitForSingleObject
VirtualFreeEx
WriteFile
SetFileTime
GetCurrentDirectoryW
GetFileAttributesW
CreateDirectoryW
WideCharToMultiByte
MultiByteToWideChar
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
CloseHandle
CreateFileW
MoveFileW
SetFilePointer
user32
GetClipboardFormatNameW
EnumDisplaySettingsW
ChangeDisplaySettingsW
GetDialogBaseUnits
FindWindowExW
ValidateRgn
ChildWindowFromPoint
GetWindowTextW
GetClassNameW
UnionRect
EndPaint
BeginPaint
GetWindowDC
PostThreadMessageW
ValidateRect
GetMessageW
DestroyCursor
DrawIconEx
TranslateAcceleratorW
CreateAcceleratorTableW
DestroyAcceleratorTable
keybd_event
GetWindowTextLengthW
HideCaret
GetDoubleClickTime
CreateMenu
AppendMenuW
ModifyMenuW
RemoveMenu
InsertMenuItemW
InsertMenuW
CreatePopupMenu
GetSubMenu
DestroyMenu
CreateIconIndirect
LoadImageW
DestroyIcon
GetIconInfo
LoadBitmapW
LoadIconW
LoadCursorW
MsgWaitForMultipleObjects
MessageBoxW
DrawEdge
DrawStateW
SetRect
DrawFrameControl
SetMenuItemInfoW
CheckMenuRadioItem
CheckMenuItem
GetMenuState
DrawFocusRect
OffsetRect
CopyRect
DrawTextW
GetDesktopWindow
RegisterClassW
UnregisterClassW
SetWindowRgn
GetMenu
AdjustWindowRectEx
GetSystemMenu
EnableMenuItem
DrawMenuBar
GetWindowPlacement
wsprintfW
SetForegroundWindow
SetMenu
GetWindowRect
IsClipboardFormatAvailable
ShowCursor
MessageBeep
KillTimer
CreateDialogIndirectParamW
FlashWindow
IsIconic
IsZoomed
BringWindowToTop
GetDlgItem
CreateDialogParamW
InflateRect
PtInRect
UnregisterHotKey
RegisterHotKey
SetWindowsHookExW
GetMenuItemCount
GetMenuItemInfoW
SystemParametersInfoW
BeginDeferWindowPos
EndDeferWindowPos
MapWindowPoints
GetUpdateRgn
SetCursor
CreateWindowExW
SendMessageW
PostMessageW
PostQuitMessage
TranslateMessage
DispatchMessageW
PeekMessageW
ReleaseDC
GetDC
MapVirtualKeyW
VkKeyScanW
GetAsyncKeyState
GetSystemMetrics
GetKeyState
SetTimer
DdeFreeStringHandle
DdeUninitialize
DdeQueryStringW
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeGetLastError
DdeInitializeW
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleW
DdeNameService
DdeConnect
DdePostAdvise
GetSysColorBrush
DeferWindowPos
MoveWindow
UpdateWindow
SetCursorPos
ReleaseCapture
SetFocus
DestroyWindow
GetClientRect
GetSysColor
SetWindowTextW
IsWindow
CallWindowProcW
DefWindowProcW
FillRect
InvalidateRect
IsDialogMessageW
TrackPopupMenu
GetCapture
CallNextHookEx
UnhookWindowsHookEx
GetWindow
GetActiveWindow
GetMessageTime
IsWindowEnabled
IsWindowVisible
ClientToScreen
ScreenToClient
RedrawWindow
SetParent
GetCursorPos
WindowFromPoint
GetParent
ScrollWindow
EnableScrollBar
SetScrollInfo
GetScrollInfo
SetCapture
SetWindowPos
ShowWindow
GetFocus
EnableWindow
SetWindowLongW
GetWindowLongW
GetMessagePos
gdi32
SetViewportExtEx
SetMapMode
SelectClipRgn
GetBkColor
SetStretchBltMode
ExtSelectClipRgn
ExtFloodFill
GetCharABCWidthsW
GetTextExtentExPointW
Arc
Pie
Polygon
SetPolyFillMode
PolyPolygon
Rectangle
RoundRect
Ellipse
MaskBlt
ExtTextOutW
StretchDIBits
StretchBlt
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
CreateHatchBrush
SaveDC
RestoreDC
CreateRectRgnIndirect
SetWindowExtEx
MoveToEx
CreateICW
SetTextAlign
CreateDIBSection
GetDIBits
CreateDIBitmap
GetDIBColorTable
EnumFontFamiliesExW
SetAbortProc
StartDocW
EndDoc
StartPage
EndPage
CreateDCW
GetSystemPaletteEntries
GetEnhMetaFileW
DeleteEnhMetaFile
GetEnhMetaFileHeader
CreateEnhMetaFileW
PlayEnhMetaFile
CloseEnhMetaFile
SetWindowOrgEx
PolyBezier
SetPixel
GetPixel
SetViewportOrgEx
SetROP2
GetClipBox
Polyline
CombineRgn
RectInRegion
PtInRegion
EqualRgn
GetRgnBox
ExtCreatePen
CreatePatternBrush
GetStockObject
GetObjectW
BitBlt
CreateCompatibleBitmap
CreateBitmap
DeleteDC
CreateCompatibleDC
CreatePen
CreateSolidBrush
SetBkMode
SetTextColor
GetRegionData
SetBkColor
ExtCreateRegion
OffsetRgn
DeleteObject
CreateFontIndirectW
GetOutlineTextMetricsW
GetTextMetricsW
SelectObject
RealizePalette
SelectPalette
GetTextExtentPoint32W
GdiFlush
CreateRectRgn
SetBrushOrgEx
LineTo
GetDeviceCaps
ExcludeClipRect
comdlg32
PrintDlgW
GetSaveFileNameW
GetOpenFileNameW
ChooseColorW
ChooseFontW
CommDlgExtendedError
PageSetupDlgW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
shell32
SHGetSpecialFolderLocation
SHGetFileInfoW
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW
ExtractIconExW
ExtractIconW
DragQueryFileW
DragQueryPoint
DragFinish
DragAcceptFiles
comctl32
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragMove
ImageList_BeginDrag
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_Draw
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_Add
ImageList_Create
ImageList_Destroy
ImageList_GetIconSize
ImageList_GetImageCount
ord16
ord17
ImageList_EndDrag
ole32
ReleaseStgMedium
CoLockObjectExternal
RegisterDragDrop
OleSetClipboard
CoCreateInstance
CoTaskMemAlloc
OleInitialize
OleUninitialize
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
RevokeDragDrop
rpcrt4
RpcStringFreeW
UuidToStringW
advapi32
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
GetUserNameW
RegDeleteKeyW
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
716KB
Virtual Size
716KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
39KB
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
13B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
258KB
Virtual Size
258KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=51, id=158, productName=VS2010 build 30319, version=30319,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=23, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=546, id=1, productName=Unmarked objects,
count=253, id=170, productName=VS2010 build 30319, version=30319,
count=354, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
uMod_Settings.txt
- SHA256 13d78e68ce93a3c6479996845d692f100fdd12c5021d17e2b3637e69362a3280
- MD5 4b1b43263b8f861e7466597421ba4ab0
- SHA1 611238328b3ba17bfa91c82aeb88e9d1820c4d61
- SHA512 e85a4e0d82ec48c82eda6e24d5a1e90aa9cf00b88ed14bcfa1627285bb8b2adf8f030a2bb376ba17c9a3ce3e60de68672802c9cfc6a8ce3b8d549051d5720dfb
- TLSH T1DFB0928A18B95134F8F89E034CEB8152673A68C03C24201810C8034409D3044E839B37
- MD5 SHA1 SHA512 TLSH
uMod_d3d9_DI.dll
- IMPHASH b8fa21b2e3a70e385527dba671e1ed74
- SHA256 3fd876855317ce9555a9046f161e14f118ccb09ebb84541072511f53020fc529
- MD5 22bb4d5423c0628755974619bde57c96
- SHA1 a9ed23dd3b237ca1eb7e0087ea1dfe61e2ba01ea
- SHA512 a197be7b7466c9b32371330d299cd7a9e5f18308b07fffe068f1528fb32821ce348610de7856bf70ae8c7dfba105348f3deee69d03a940778dad634a56b09ce9
- SSDEEP 1536:NzqmcDOxHHPD5wgAg3Q2yPOb3KeyS1PKBPts9zJzyLVIF3JdpRqg7tnGhikNG4B6:NmmoOxHbqLPObYm9Ryy4jKN
- TLSH T1BEC36C2037A2C0B2C59B653C853E836B67AE76314BF444C77F542B796E713C09AB9386
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
40005
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d3dx9_43
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateTextureFromFileInMemoryEx
D3DXSaveTextureToFileW
D3DXCreateFontA
user32
GetAsyncKeyState
kernel32
TlsSetValue
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetStringTypeW
ExitProcess
LoadLibraryA
GetSystemDirectoryA
GetModuleFileNameW
GetModuleHandleA
VirtualProtect
FreeLibrary
CloseHandle
GetProcAddress
CreateThread
DisableThreadLibraryCalls
WaitForSingleObject
ReleaseMutex
CreateMutexA
WriteFile
CreateFileW
DisconnectNamedPipe
GetLastError
ReadFile
HeapAlloc
RtlUnwind
GetCurrentThreadId
DecodePointer
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapFree
GetModuleHandleW
GetStdHandle
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
RaiseException
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
SetFilePointer
Sleep
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
HeapReAlloc
LCMapStringW
Nothing
uMod_Direct3DCreate9
uMod_Direct3DCreate9Ex
Name
.text
Size
90KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=158, productName=VS2010 build 30319, version=30319,
count=126, id=170, productName=VS2010 build 30319, version=30319,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, version=21202,
count=93, id=1, productName=Unmarked objects,
count=55, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
uMod_d3d9_HI.dll
- IMPHASH 41893624a2a4306dfeaa380b8ede6633
- SHA256 ddc464c72bc5fa5226e79d1d81946a6bf2d5b98cc49482f600b096ae858427c0
- MD5 df96f1e3828f4d83dc1c6ed71c88bd8f
- SHA1 5513be0870fd60887c2dbb83d88d9e8bac37921d
- SHA512 053b763dafab1eb86e6d00dc7496bcc665cb7175b4600d33aedc19311ffba7ed174bddab5b80518c38b541e08e1577670f02e2ba67a7aae50b638ae15da7737e
- SSDEEP 1536:xGjT+ibQ+fzQ83ggYO6P3LlY2mZg+jVL5x6CFbmAF/fdGiMRr03anRTlQYH8bMgF:sKibQ4UAibMloaxWiMJlEfbjUY
- TLSH T142C36C2137A2C0B2C15B7438943DC72B676E76314BE545C77FA42BB91E713C0AAB9386
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
41397
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d3dx9_43
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateTextureFromFileInMemoryEx
D3DXSaveTextureToFileW
D3DXCreateFontA
user32
GetAsyncKeyState
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
kernel32
IsValidCodePage
SetEndOfFile
WriteConsoleW
HeapReAlloc
HeapSize
LoadLibraryW
SetEnvironmentVariableW
CompareStringW
ExitProcess
LoadLibraryA
GetSystemDirectoryA
GetModuleFileNameW
GetModuleHandleA
VirtualProtect
FreeLibrary
CloseHandle
GetProcAddress
CreateThread
DisableThreadLibraryCalls
WaitForSingleObject
ReleaseMutex
CreateMutexA
WriteFile
CreateFileW
DisconnectNamedPipe
GetLastError
ReadFile
HeapAlloc
RtlUnwind
GetCurrentThreadId
DecodePointer
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetProcessHeap
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
DeleteCriticalSection
GetStdHandle
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
RaiseException
SetHandleCount
GetFileType
GetStartupInfoW
SetFilePointer
Sleep
GetModuleFileNameA
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
GetStringTypeW
InstallHook
RemoveHook
uMod_Direct3DCreate9
uMod_Direct3DCreate9Ex
Name
.text
Size
95KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=158, productName=VS2010 build 30319, version=30319,
count=139, id=170, productName=VS2010 build 30319, version=30319,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, version=21202,
count=98, id=1, productName=Unmarked objects,
count=58, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,