d3dcompiler_47[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
d3dcompiler_47.dll
Size 4.3MB
Sample260916-1demaaee43
SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
MD5 7641e39b7da4077084d2afe7c31032e0
SHA1 2256644f69435ff2fee76deb04d918083960d1eb
SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
TLSH
T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

d3dcompiler_47.dll

.dll 4.3MB

d3dcompiler_47.dll

IMPHASH 36f6d7806085bd3a70ed8c5dcb51f6c8
SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
MD5 7641e39b7da4077084d2afe7c31032e0
SHA1 2256644f69435ff2fee76deb04d918083960d1eb
SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
TLSH
T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

e5:55:bf:8b:65:d0:a7:9e:47:27:01:03:ac:36:3c:47:95:ee:1b:ca:2e:7b:8d:1f:48:c1:b8:b5:d8:05:0b:df

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Dec 7, 2019

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

Major OS version

Entry point

2548016

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D3DCompiler_47.pdb

api-ms-win-crt-string-l1-1-0

strncmp strcmp strnlen __isascii wcsncmp memset

api-ms-win-crt-math-l1-1-0

_finite _isnan floorf

api-ms-win-crt-runtime-l1-1-0

_initterm_e _controlfp _initterm _clearfp

api-ms-win-crt-private-l1-1-0

_o__close _o__configure_narrow_argv _o__crt_atexit _o__errno _o__execute_onexit_table _o__filelengthi64 _o__fpclass _o__get_osfhandle _o__initialize_narrow_environment _o__initialize_onexit_table _o__invalid_parameter_noinfo _o__lseeki64 _o__mbscmp _o__mbstrlen _o__memicmp _o__open_osfhandle _o__purecall _o__read _o__register_onexit_function _o__seh_filter_dll _o__strdup _o__stricmp _o__strnicmp _o__strtoui64 _o__wcsdup _o__wcsicmp _o__wcsnicmp _o__wfsopen _o__wfullpath _o__wgetenv _o__wmakepath_s _o__write _o__wsopen_s _o__wsplitpath_s _o__wtoi _o_acos _o_asin _o_atan _o_atan2 _o_atof _o_atoi _o_bsearch _o_calloc _o_ceil _o_cos _o_cosh _o_exp _o_fclose _o_floor _o_fmod _o_fread _o_free _o_fseek _o_ftell _o_getenv _o_isalnum _o_isalpha _o_isdigit _o_isspace _o_isxdigit _o_log _o_malloc _o_modf _o_pow _o_qsort _o_setlocale _o_sin _o_sinh _o_sqrt _o_strcat_s _o_strcpy_s _o_strncpy_s _o_strtod _o_strtoul _o_tan _o_tanh _o_terminate _o_tolower _o_toupper _o_towlower _o_wcscat_s _o_wcscpy_s _o_wcsncat_s _o_wcsncpy_s _o_wcstoul strrchr strchr __C_specific_handler _o__cexit _o__callnewh _o__atoi64 _o___stdio_common_vswprintf_s _o___stdio_common_vswprintf _o___stdio_common_vsscanf _o___stdio_common_vsprintf_s _o___stdio_common_vsprintf _o___stdio_common_vsnwprintf_s _o___stdio_common_vsnprintf_s _o___std_type_info_destroy_list memcpy _CxxThrowException memmove strstr __unDName memcmp wcschr wcsrchr __CxxFrameHandler3 _o__chsize_s

kernel32

CreateFileA MultiByteToWideChar lstrcmpiA GetModuleFileNameA WideCharToMultiByte InitializeCriticalSection FlushViewOfFile ResetEvent SetFilePointer HeapCreate InitializeCriticalSectionAndSpinCount ExpandEnvironmentStringsW DeviceIoControl SetFilePointerEx SetEndOfFile GetFileType DeleteFileW SetFileAttributesW GetFileAttributesW LCMapStringW SetLastError UnmapViewOfFile MapViewOfFile CreateFileMappingW GetFileSize WaitForSingleObjectEx CreateEventW DisableThreadLibraryCalls MapViewOfFileEx GetEnvironmentVariableA LocalFree LocalAlloc LoadLibraryExW GetProcAddress GetModuleHandleW InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetFullPathNameA GetFullPathNameW TlsFree TlsGetValue HeapDestroy TlsSetValue TlsAlloc Sleep FreeLibrary CloseHandle ReadFile GetFileSizeEx GetLastError CreateFileW GetSystemInfo VirtualAlloc VirtualFree WriteFile HeapFree GetProcessHeap HeapAlloc OutputDebugStringA LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SetEvent

advapi32

RegCloseKey RegQueryValueExA CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam RegOpenKeyExW CryptReleaseContext CryptAcquireContextW RegQueryValueExW RegEnumKeyExA RegOpenKeyExA

api-ms-win-crt-time-l1-1-0

_time64

rpcrt4

UuidCreate