example_win32_directx11[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
example_win32_directx11.exe
Size 12.7MB
Sample260909-qdr79scc37
SHA256 d362da19687cd921e20b4ea4469974beeee1bce0128fc0b0930119356ff30e6b
MD5 3bc8299307234509946b370a9590f127
SHA1 544123cc26dfa9062fe2a8a2008bbd201b620510
SHA512 a825ba9b3465a33d8bb4ecd866eca50fb910cddc1a184cf7656d8cb5f7b14b3d17cd026bd28a1d7e9978b0831607e0533517720da63fa779a5826cf52d9be873
SSDEEP 98304:rtWxtKHi+qm66vGj3Mu9/0tw5YhvnbH4Ss:rMxtGUmkrGG5kA
TLSH
T1A3D648694D5CAE8EA165B0B58593429743F06F2F33E1CFCB94C02D637C2F998B6051AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
example_win32_directx11.exe

File Explorer

example_win32_directx11.exe

.exe 12.7MB

example_win32_directx11.exe

IMPHASH dfb83933bca7f7317729446cc06de54c
SHA256 d362da19687cd921e20b4ea4469974beeee1bce0128fc0b0930119356ff30e6b
MD5 3bc8299307234509946b370a9590f127
SHA1 544123cc26dfa9062fe2a8a2008bbd201b620510
SHA512 a825ba9b3465a33d8bb4ecd866eca50fb910cddc1a184cf7656d8cb5f7b14b3d17cd026bd28a1d7e9978b0831607e0533517720da63fa779a5826cf52d9be873
SSDEEP 98304:rtWxtKHi+qm66vGj3Mu9/0tw5YhvnbH4Ss:rMxtGUmkrGG5kA
TLSH
T1A3D648694D5CAE8EA165B0B58593429743F06F2F33E1CFCB94C02D637C2F998B6051AB
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13024784

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\newtrm1\Downloads\13 project 50 $\13 project 50 $\thirdparty\imgui\examples\example_win32_directx11\Release\example_win32_directx11.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

kernel32

MultiByteToWideChar QueryPerformanceFrequency FreeLibrary QueryPerformanceCounter GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock Sleep GetModuleHandleW UnmapViewOfFile GetProcAddress HeapFree HeapAlloc ReadFile GetFileSizeEx CreateFileA WakeAllConditionVariable SleepConditionVariableSRW SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetLocaleInfoA CloseHandle LoadLibraryA MapViewOfFile ReleaseSRWLockExclusive CreateFileMappingA AcquireSRWLockExclusive

user32

DestroyWindow CreateWindowExW UnregisterClassW RegisterClassExW ShowWindow GetAsyncKeyState DispatchMessageW PeekMessageW SetLayeredWindowAttributes TranslateMessage PostQuitMessage UpdateWindow OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData GetKeyState DefWindowProcW SetCursorPos ReleaseCapture IsWindowUnicode GetClientRect GetMessageExtraInfo ScreenToClient GetCapture SetCursor ClientToScreen SetCapture GetWindowRect MoveWindow SendMessageW GetSystemMetrics LoadCursorW GetForegroundWindow GetKeyboardLayout TrackMouseEvent GetCursorPos

shell32

ShellExecuteA

msvcp140

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ?good@ios_base@std@@QEBA_NXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ?uncaught_exceptions@std@@YAHXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmSetCandidateWindow ImmReleaseContext ImmGetContext ImmSetCompositionWindow

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memchr memcmp __current_exception __current_exception_context __C_specific_handler __intrinsic_setjmp _CxxThrowException memset __std_exception_destroy memmove __std_exception_copy __std_terminate strstr memcpy longjmp strrchr

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc _callnewh

api-ms-win-crt-math-l1-1-0

roundf ceilf cosf fmodf powf sinf sqrtf acosf __setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vsprintf fread _wfopen fwrite __stdio_common_vsscanf __stdio_common_vfprintf fseek fclose fflush __acrt_iob_func __p__commode ftell

api-ms-win-crt-time-l1-1-0

strftime _localtime64_s _time64

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _cexit _seh_filter_exe _set_app_type _get_narrow_winmain_command_line _initterm _initterm_e exit _exit _register_onexit_function _c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _configure_narrow_argv _initialize_narrow_environment _wassert terminate

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-string-l1-1-0

strncpy strlen strcmp strncmp

api-ms-win-crt-locale-l1-1-0

_configthreadlocale