vk_swiftshader[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
vk_swiftshader.dll
Size 5.3MB
Sample260923-x57wcssv5q
SHA256 6854c940a71ca1c112a2390342e693a0d847a140a5ee3e431c1571359e2c3478
MD5 99486be6e282e9013c977f9f832ed532
SHA1 a7910046d26b3e3b01f00ebff1432ed40e9ff3dc
SHA512 9966253fa772c87a7c628c9da1f861886ab47d264325c7e81dad3eece4f7df47646ec034626464bf29aa3f8e8e00a16adb7bd2fdc7e1bc973682b0d093de17ef
SSDEEP 49152:yPAcw1UehJoQQe9MNngGW18oksGCU7hg9nb5svav8Kxq7Rycb7GrRstpbQKYenM4:yPAcwautcivngiqh
TLSH
T141463803F28980D9F05DD5B9875FA622F672B8814B2276DF52A01F192E77FE0A739701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vk_swiftshader.dll

File Explorer

vk_swiftshader.dll

.dll 5.3MB

vk_swiftshader.dll

IMPHASH 044fe78a0bf0936739485626c9260122
SHA256 6854c940a71ca1c112a2390342e693a0d847a140a5ee3e431c1571359e2c3478
MD5 99486be6e282e9013c977f9f832ed532
SHA1 a7910046d26b3e3b01f00ebff1432ed40e9ff3dc
SHA512 9966253fa772c87a7c628c9da1f861886ab47d264325c7e81dad3eece4f7df47646ec034626464bf29aa3f8e8e00a16adb7bd2fdc7e1bc973682b0d093de17ef
SSDEEP 49152:yPAcw1UehJoQQe9MNngGW18oksGCU7hg9nb5svav8Kxq7Rycb7GrRstpbQKYenM4:yPAcwautcivngiqh
TLSH
T141463803F28980D9F05DD5B9875FA622F672B8814B2276DF52A01F192E77FE0A739701
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3926624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

vk_swiftshader.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CompareStringW ConvertFiberToThread ConvertThreadToFiberEx CreateFiberEx CreateFileW CreateRemoteThreadEx CreateThread DeleteCriticalSection DeleteFiber DeleteFileW DeleteProcThreadAttributeList EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FlushInstructionCache FormatMessageA FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetLogicalProcessorInformationEx GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID HeapAlloc HeapFree HeapQueryInformation HeapReAlloc HeapSize HeapValidate HeapWalk InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExW LocalFree MultiByteToWideChar OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive RemoveDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleTextAttribute SetEndOfFile SetEnvironmentVariableW SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SleepConditionVariableSRW SwitchToFiber SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UpdateProcThreadAttribute VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

user32

GetClientRect GetDC IsWindow ReleaseDC

gdi32

StretchDIBits

vkAcquireNextImage2KHR vkAcquireNextImageKHR vkAllocateCommandBuffers vkAllocateDescriptorSets vkAllocateMemory vkBeginCommandBuffer vkBindBufferMemory vkBindBufferMemory2 vkBindImageMemory vkBindImageMemory2 vkCmdBeginQuery vkCmdBeginRenderPass vkCmdBeginRenderPass2 vkCmdBeginRendering vkCmdBindDescriptorSets vkCmdBindIndexBuffer vkCmdBindPipeline vkCmdBindVertexBuffers vkCmdBindVertexBuffers2 vkCmdBlitImage vkCmdBlitImage2 vkCmdClearAttachments vkCmdClearColorImage vkCmdClearDepthStencilImage vkCmdCopyBuffer vkCmdCopyBuffer2 vkCmdCopyBufferToImage vkCmdCopyBufferToImage2 vkCmdCopyImage vkCmdCopyImage2 vkCmdCopyImageToBuffer vkCmdCopyImageToBuffer2 vkCmdCopyQueryPoolResults vkCmdDispatch vkCmdDispatchBase vkCmdDispatchIndirect vkCmdDraw vkCmdDrawIndexed vkCmdDrawIndexedIndirect vkCmdDrawIndexedIndirectCount vkCmdDrawIndirect vkCmdDrawIndirectCount vkCmdEndQuery vkCmdEndRenderPass vkCmdEndRenderPass2 vkCmdEndRendering vkCmdExecuteCommands vkCmdFillBuffer vkCmdNextSubpass vkCmdNextSubpass2 vkCmdPipelineBarrier vkCmdPipelineBarrier2 vkCmdPushConstants vkCmdResetEvent vkCmdResetEvent2 vkCmdResetQueryPool vkCmdResolveImage vkCmdResolveImage2 vkCmdSetBlendConstants vkCmdSetCullMode vkCmdSetDepthBias vkCmdSetDepthBiasEnable vkCmdSetDepthBounds vkCmdSetDepthBoundsTestEnable vkCmdSetDepthCompareOp vkCmdSetDepthTestEnable vkCmdSetDepthWriteEnable vkCmdSetDeviceMask vkCmdSetEvent vkCmdSetEvent2 vkCmdSetFrontFace vkCmdSetLineWidth vkCmdSetPrimitiveRestartEnable vkCmdSetPrimitiveTopology vkCmdSetRasterizerDiscardEnable vkCmdSetScissor vkCmdSetScissorWithCount vkCmdSetStencilCompareMask vkCmdSetStencilOp vkCmdSetStencilReference vkCmdSetStencilTestEnable vkCmdSetStencilWriteMask vkCmdSetViewport vkCmdSetViewportWithCount vkCmdUpdateBuffer vkCmdWaitEvents vkCmdWaitEvents2 vkCmdWriteTimestamp vkCmdWriteTimestamp2 vkCreateBuffer vkCreateBufferView vkCreateCommandPool vkCreateComputePipelines vkCreateDescriptorPool vkCreateDescriptorSetLayout vkCreateDescriptorUpdateTemplate vkCreateDevice vkCreateEvent vkCreateFence vkCreateFramebuffer vkCreateGraphicsPipelines vkCreateImage vkCreateImageView vkCreateInstance vkCreatePipelineCache vkCreatePipelineLayout vkCreatePrivateDataSlot vkCreateQueryPool vkCreateRenderPass vkCreateRenderPass2 vkCreateSampler vkCreateSamplerYcbcrConversion vkCreateSemaphore vkCreateShaderModule vkCreateSwapchainKHR vkCreateWin32SurfaceKHR vkDestroyBuffer vkDestroyBufferView vkDestroyCommandPool vkDestroyDescriptorPool vkDestroyDescriptorSetLayout vkDestroyDescriptorUpdateTemplate vkDestroyDevice vkDestroyEvent vkDestroyFence vkDestroyFramebuffer vkDestroyImage vkDestroyImageView vkDestroyInstance vkDestroyPipeline vkDestroyPipelineCache vkDestroyPipelineLayout vkDestroyPrivateDataSlot vkDestroyQueryPool vkDestroyRenderPass vkDestroySampler vkDestroySamplerYcbcrConversion vkDestroySemaphore vkDestroyShaderModule vkDestroySurfaceKHR vkDestroySwapchainKHR vkDeviceWaitIdle vkEndCommandBuffer vkEnumerateDeviceExtensionProperties vkEnumerateDeviceLayerProperties vkEnumerateInstanceExtensionProperties vkEnumerateInstanceLayerProperties vkEnumerateInstanceVersion vkEnumeratePhysicalDeviceGroups vkEnumeratePhysicalDevices vkFlushMappedMemoryRanges vkFreeCommandBuffers vkFreeDescriptorSets vkFreeMemory vkGetBufferDeviceAddress vkGetBufferMemoryRequirements vkGetBufferMemoryRequirements2 vkGetBufferOpaqueCaptureAddress vkGetDescriptorSetLayoutSupport vkGetDeviceBufferMemoryRequirements vkGetDeviceGroupPeerMemoryFeatures vkGetDeviceGroupPresentCapabilitiesKHR vkGetDeviceGroupSurfacePresentModesKHR vkGetDeviceImageMemoryRequirements vkGetDeviceImageSparseMemoryRequirements vkGetDeviceMemoryCommitment vkGetDeviceMemoryOpaqueCaptureAddress vkGetDeviceProcAddr vkGetDeviceQueue vkGetDeviceQueue2 vkGetEventStatus vkGetFenceStatus vkGetImageMemoryRequirements vkGetImageMemoryRequirements2 vkGetImageSparseMemoryRequirements vkGetImageSparseMemoryRequirements2 vkGetImageSubresourceLayout vkGetInstanceProcAddr vkGetPhysicalDeviceExternalBufferProperties vkGetPhysicalDeviceExternalFenceProperties vkGetPhysicalDeviceExternalSemaphoreProperties vkGetPhysicalDeviceFeatures vkGetPhysicalDeviceFeatures2 vkGetPhysicalDeviceFormatProperties vkGetPhysicalDeviceFormatProperties2 vkGetPhysicalDeviceImageFormatProperties vkGetPhysicalDeviceImageFormatProperties2 vkGetPhysicalDeviceMemoryProperties vkGetPhysicalDeviceMemoryProperties2 vkGetPhysicalDevicePresentRectanglesKHR vkGetPhysicalDeviceProperties vkGetPhysicalDeviceProperties2 vkGetPhysicalDeviceQueueFamilyProperties vkGetPhysicalDeviceQueueFamilyProperties2 vkGetPhysicalDeviceSparseImageFormatProperties vkGetPhysicalDeviceSparseImageFormatProperties2 vkGetPhysicalDeviceSurfaceCapabilities2KHR vkGetPhysicalDeviceSurfaceCapabilitiesKHR vkGetPhysicalDeviceSurfaceFormats2KHR vkGetPhysicalDeviceSurfaceFormatsKHR vkGetPhysicalDeviceSurfacePresentModesKHR vkGetPhysicalDeviceSurfaceSupportKHR vkGetPhysicalDeviceToolProperties vkGetPhysicalDeviceWin32PresentationSupportKHR vkGetPipelineCacheData vkGetPrivateData vkGetQueryPoolResults vkGetRenderAreaGranularity vkGetSemaphoreCounterValue vkGetSwapchainImagesKHR vkInvalidateMappedMemoryRanges vkMapMemory vkMergePipelineCaches vkQueueBindSparse vkQueuePresentKHR vkQueueSubmit vkQueueSubmit2 vkQueueWaitIdle vkReleaseSwapchainImagesEXT vkResetCommandBuffer vkResetCommandPool vkResetDescriptorPool vkResetEvent vkResetFences vkResetQueryPool vkSetEvent vkSetPrivateData vkSignalSemaphore vkTrimCommandPool vkUnmapMemory vkUpdateDescriptorSetWithTemplate vkUpdateDescriptorSets vkWaitForFences vkWaitSemaphores vk_icdEnumerateAdapterPhysicalDevices vk_icdGetInstanceProcAddr vk_icdGetPhysicalDeviceProcAddr vk_icdNegotiateLoaderICDInterfaceVersion

Name

.text

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

905KB

Virtual Size

904KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

104KB

Virtual Size

184KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

87KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

89B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

vk_swiftshader.dll

kernel32

user32

gdi32

generic