DsmUserTask[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

DsmUserTask.exe
Size

13KB
MD5

0429264498aa64d342ca4b24ed9705b1
SHA1

d69e8d7c98592d91baa8aa60e8a0ce93335c1adc
SHA256

517c9292281404b4735c860f4d84b868e01430979fbfb84f40a4e18363b528b6
SHA512

17e24bdaae4425a8d9da209a767757cb364107833f7ae537a1721accb700ab965a8865a92c0dd6ba753b3fa3ca6112ab684a8adce8f5e7d2374f2dfabc4dddf0
SSDEEP

192:y3Q+ifW9wPRuQMepJynlJn2qwecGjeKV/QSSGR8zSvoW0zWDr:y3Q+ifWdyAHDjePGWGoW0zWDr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DsmUserTask.exe

Files

DsmUserTask.exe
.exe windows:6 windows x64

853fb7cd972d8e10ad2edea167efbc2c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

TraceMessage
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids

kernel32

GetLastError

msvcrt

_initterm
_fmode
__C_specific_handler
_wcmdln
_cexit
exit
__set_app_type
_exit
?terminate@@YAXXZ
_commode
__setusermatherr
__wgetmainargs
_amsg_exit
_XcptFilter
wcstok_s
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
memcpy
memset

api-ms-win-core-com-l1-1-1

CoUninitialize
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcess
TerminateProcess
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter
UnhandledExceptionFilter

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-rtlsupport-l1-2-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

setupapi

SetupDiReportAdditionalSoftwareRequested
SetupDiDestroyDeviceInfoList
SetupDiReportDriverNotFoundError
SetupDiOpenDeviceInfoW
SetupDiCreateDeviceInfoList
SetupDiReportGenericDriverInstalled

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

853fb7cd972d8e10ad2edea167efbc2c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

api-ms-win-core-com-l1-1-1

api-ms-win-core-synch-l1-2-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-rtlsupport-l1-2-0

setupapi

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 276B

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 48B

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 276B

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 48B