PrismTextureStreamerFB[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
PrismTextureStreamerFB.dll
Size 431KB
Sample260808-wb8ecsbj8x
SHA256 3ebb0aa2937d1d30d27297475a739e10e3b5fddc30f0e27c120bc58bf58fbe58
MD5 944b21547c0d8aad4957a37c1ae882a7
SHA1 032c19d4759332ddcdf1facb08f7f354432b2920
SHA512 f06ef0227407c2ee259d480fb773f24302bbfbf37445035d0f4096dbd78a02f72469d48e0b22e1551ee0df2b953280aa3bacc41cbcadc5ae9294b79bbbaa425b
SSDEEP 6144:Fm7KkQi+EfXkxGfKRb696lzR9Ii8L+l+Mx8H3j0qcWP1190KbgiHbnSX/yICU:FyKkQ1QSRVzR9r8L0xAz2WDSTi7nSXM
TLSH
T156948D46F2F444FCD16BA0399147BA0BEA793894031086DB33F8E5692FD37E596BA311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PrismTextureStreamerFB.dll

File Explorer

PrismTextureStreamerFB.dll

.dll 431KB

PrismTextureStreamerFB.dll

IMPHASH 5c05438ffa31d315b1e27d1d08c7cba2
SHA256 3ebb0aa2937d1d30d27297475a739e10e3b5fddc30f0e27c120bc58bf58fbe58
MD5 944b21547c0d8aad4957a37c1ae882a7
SHA1 032c19d4759332ddcdf1facb08f7f354432b2920
SHA512 f06ef0227407c2ee259d480fb773f24302bbfbf37445035d0f4096dbd78a02f72469d48e0b22e1551ee0df2b953280aa3bacc41cbcadc5ae9294b79bbbaa425b
SSDEEP 6144:Fm7KkQi+EfXkxGfKRb696lzR9Ii8L+l+Mx8H3j0qcWP1190KbgiHbnSX/yICU:FyKkQ1QSRVzR9r8L0xAz2WDSTi7nSXM
TLSH
T156948D46F2F444FCD16BA0399147BA0BEA793894031086DB33F8E5692FD37E596BA311
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

345096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

H:\repos\PrismTextureStreamerFB\x64\Release\PrismTextureStreamerFB.pdb

kernel32

VirtualFree VirtualAlloc GetSystemInfo Thread32Next Thread32First CreateToolhelp32Snapshot GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte CloseHandle GetLocaleInfoA FlushInstructionCache SetThreadContext GetThreadContext ResumeThread SuspendThread OpenThread HeapFree HeapReAlloc HeapAlloc QueryFullProcessImageNameA HeapCreate MultiByteToWideChar InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId Sleep VirtualQuery LoadLibraryA QueryPerformanceFrequency GetLastError VirtualProtect GetModuleHandleW GetModuleHandleA OpenProcess GlobalUnlock HeapDestroy GetProcAddress

user32

LoadCursorW SetWindowLongPtrW SetCapture SetCursor CallWindowProcW IsWindowUnicode GetCapture ScreenToClient GetKeyboardLayout ReleaseCapture SetCursorPos GetCursorPos GetMessageExtraInfo GetKeyState SetClipboardData GetClipboardData EmptyClipboard GetDC OpenClipboard TrackMouseEvent IsWindow PrintWindow GetClientRect ReleaseDC GetWindowThreadProcessId IsWindowVisible GetAsyncKeyState GetWindowTextA GetWindowLongA EnumWindows GetWindowTextLengthA GetForegroundWindow ClientToScreen CloseClipboard

gdi32

CreateCompatibleBitmap SelectObject CreateCompatibleDC GetDIBits DeleteDC DeleteObject

msvcp140

_Query_perf_frequency _Cnd_do_broadcast_at_thread_exit _Thrd_id _Query_perf_counter _Thrd_join ??Bid@locale@std@@QEAA_KXZ ?_Xbad_function_call@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Throw_Cpp_error@std@@YAXH@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?id@?$ctype@D@std@@2V0locale@2@A _Mtx_lock _Mtx_unlock ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ??Bios_base@std@@QEBA_NXZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ

dinput8

DirectInput8Create

d3d11

D3D11CreateDevice D3D11CreateDeviceAndSwapChain

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memchr memcmp memcpy memmove __std_exception_destroy strchr strstr __std_type_info_destroy_list memset _CxxThrowException __C_specific_handler strrchr __std_terminate __std_exception_copy

api-ms-win-crt-stdio-l1-1-0

fseek fclose fflush __acrt_iob_func ftell __stdio_common_vsprintf __stdio_common_vfprintf fwrite _wfopen fread __stdio_common_vsscanf

api-ms-win-crt-runtime-l1-1-0

_initterm _invalid_parameter_noinfo_noreturn _beginthreadex terminate _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _cexit _initterm_e

api-ms-win-crt-string-l1-1-0

strncmp strncpy strcmp strcpy_s _stricmp

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc

api-ms-win-crt-utility-l1-1-0

qsort

d3dcompiler_47

D3DCompile

imm32

ImmGetContext ImmSetCompositionWindow ImmReleaseContext ImmSetCandidateWindow

shell32

ShellExecuteA

api-ms-win-crt-math-l1-1-0

acosf ceilf sqrtf fmodf sinf cosf