example_win32_directx11[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
example_win32_directx11.exe
Size 13.5MB
Sample261113-hg28msgx21
SHA256 3ca570e83eebfc79ec9e1e6e8629b0b2495e04c07466ec0fe711f4c06ca59d9c
MD5 c8caceb3b98776a8c9c49b12c9ec0bf5
SHA1 3849e8f43b71ccd486852163fb3be624c61888ea
SHA512 58bea1bd8b147a8d2ea391c1bcbd051d09ea1fee40ae1016c8f1d59f9a3c8af807d9f8876f3674163270ff99ebcbb866a649d6ddadfc3a99519ac12ae269ba68
SSDEEP 196608:IEV2KXOKlIpslql2PoO6h0hh12a9BP8sm7OoX:IE9plpI4oLihh12KPw7Oa
TLSH
T103E68B71A18CAB5DF462B174DC83922393F17C4C2260CFA7A9E44DF3591F998BBA520D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
example_win32_directx11.exe

File Explorer

example_win32_directx11.exe

.exe 13.5MB

example_win32_directx11.exe

IMPHASH 06c7010d7fde46ae1373b0222bbe5669
SHA256 3ca570e83eebfc79ec9e1e6e8629b0b2495e04c07466ec0fe711f4c06ca59d9c
MD5 c8caceb3b98776a8c9c49b12c9ec0bf5
SHA1 3849e8f43b71ccd486852163fb3be624c61888ea
SHA512 58bea1bd8b147a8d2ea391c1bcbd051d09ea1fee40ae1016c8f1d59f9a3c8af807d9f8876f3674163270ff99ebcbb866a649d6ddadfc3a99519ac12ae269ba68
SSDEEP 196608:IEV2KXOKlIpslql2PoO6h0hh12a9BP8sm7OoX:IE9plpI4oLihh12KPw7Oa
TLSH
T103E68B71A18CAB5DF462B174DC83922393F17C4C2260CFA7A9E44DF3591F998BBA520D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9600416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\Past owl menus\used already\destrution loader\thirdparty\imgui\examples\example_win32_directx11\Release\example_win32_directx11.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

kernel32

GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock Sleep GetModuleHandleW DeviceIoControl MapViewOfFile HeapFree HeapAlloc CloseHandle ReadFile GetFileSizeEx CreateFileA GetEnvironmentVariableA GetLastError SetEvent ResetEvent WaitForSingleObject CreateEventA GlobalAlloc QueryPerformanceCounter FreeLibrary GetProcAddress WaitForMultipleObjects SetThreadPriority GetVersionExA LocalFree FormatMessageA WaitForMultipleObjectsEx SetWaitableTimer CancelWaitableTimer GetCurrentProcess GetCurrentThread TerminateThread GetExitCodeThread ResumeThread GetPriorityClass CreateFileW CreateWaitableTimerA SignalObjectAndWait GetThreadPriority GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive QueryPerformanceFrequency LoadLibraryA MultiByteToWideChar GetLocaleInfoA SleepConditionVariableSRW WakeAllConditionVariable SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead GetModuleHandleA UnmapViewOfFile CreateFileMappingA

user32

DefWindowProcW DestroyWindow CreateWindowExW UnregisterClassW RegisterClassExW ShowWindow DispatchMessageW PeekMessageW SetLayeredWindowAttributes TranslateMessage PostQuitMessage UpdateWindow OpenClipboard ReleaseCapture EmptyClipboard GetClipboardData SetCursorPos SetClipboardData GetKeyState GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCursor GetClientRect GetCursorPos SetWindowPos GetSystemMetrics GetWindowRect IsWindowUnicode MoveWindow CloseClipboard SetCapture

shell32

ShellExecuteA ShellExecuteW

avcodec-62

av_packet_alloc av_packet_free av_packet_unref avcodec_alloc_context3 avcodec_find_decoder avcodec_flush_buffers avcodec_free_context avcodec_open2 avcodec_parameters_to_context avcodec_receive_frame avcodec_send_packet

avformat-62

av_read_frame av_seek_frame avformat_close_input avformat_find_stream_info avformat_network_init avformat_open_input

avutil-60

av_channel_layout_copy av_channel_layout_default av_frame_alloc av_frame_free av_frame_get_buffer av_frame_unref av_log_set_level

swresample-6

swr_alloc_set_opts2 swr_convert_frame swr_free swr_init

swscale-9

sws_freeContext sws_getContext sws_scale

msvcp140

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?good@ios_base@std@@QEBA_NXZ ?_Xout_of_range@std@@YAXPEBD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?_Xlength_error@std@@YAXPEBD@Z _Mtx_trylock _Query_perf_frequency ?_Throw_Cpp_error@std@@YAXH@Z ?uncaught_exceptions@std@@YAHXZ ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?_Syserror_map@std@@YAPEBDH@Z _Mtx_lock _Cnd_do_broadcast_at_thread_exit _Query_perf_counter _Mtx_unlock ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

winmm

waveInMessage waveInReset waveInStart waveInAddBuffer timeBeginPeriod waveInUnprepareHeader waveInPrepareHeader waveInClose waveInOpen waveInGetErrorTextW timeEndPeriod waveInGetNumDevs waveOutMessage waveOutGetPosition waveOutUnprepareHeader waveOutReset waveOutRestart waveOutWrite waveOutPrepareHeader waveOutClose waveOutOpen waveOutGetErrorTextW waveOutGetDevCapsW waveInGetDevCapsW timeGetDevCaps waveOutGetNumDevs timeGetTime waveOutPause

setupapi

SetupDiOpenDeviceInterfaceRegKey SetupDiGetClassDevsA SetupDiGetDeviceInterfaceDetailW SetupDiGetDeviceInterfaceAlias SetupDiEnumDeviceInterfaces SetupDiGetDeviceRegistryPropertyW SetupDiDestroyDeviceInfoList

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove memcpy longjmp strrchr strstr __std_terminate memchr __std_exception_destroy memset __current_exception __current_exception_context __C_specific_handler __intrinsic_setjmp _CxxThrowException __std_exception_copy memcmp

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _c_exit _beginthreadex _wassert _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe _set_app_type exit _get_narrow_winmain_command_line _initterm _initterm_e _exit terminate

api-ms-win-crt-heap-l1-1-0

realloc free _callnewh malloc _set_new_mode

api-ms-win-crt-math-l1-1-0

sinf powf roundf logf __setusermatherr fmodf cosf ceilf sqrtf acosf

api-ms-win-crt-stdio-l1-1-0

fflush fclose __p__commode __acrt_iob_func ftell fseek __stdio_common_vswprintf __stdio_common_vfprintf fwrite _wfopen __stdio_common_vsprintf __stdio_common_vsscanf fread _set_fmode

api-ms-win-crt-utility-l1-1-0

bsearch qsort

api-ms-win-crt-convert-l1-1-0

atof strtol atoi

api-ms-win-crt-string-l1-1-0

strncmp strcmp strncpy wcsncpy _wcsicmp _wcsnicmp iswctype wcsncmp strlen

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

advapi32

RegQueryValueExW RegCloseKey

ole32

CoInitializeEx CoMarshalInterThreadInterfaceInStream CoUninitialize CoInitialize CoCreateInstance PropVariantClear CoTaskMemFree CoGetInterfaceAndReleaseStream