xinput9_1_0[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

xinput9_1_0.dll
Size

25KB
MD5

25672c39c74a689dc635a57b7d0619b4
SHA1

d4d6ccfa30b972a92a50cae4d6ef018a0254a88f
SHA256

3e0546d87fb9d944ed3fcc4d5e4abd883a40e3d146b3b66fa7b1f32f5d196ccb
SHA512

3111105f082e282dc251b1f1e75ba9dac18f74de3d294746214a8c388da236f51fdf31526a5932dacce83d1daa45288234dcad2b54cc2a143e6df13610d9aa94
SSDEEP

384:YPivlhMRrRkW3HsejWS0mXhcJv/iZ+Zj+auw8exGSumyJRiRjma0AshLSbG6v1Ay:gNRXXh+vq9Uxjyn3AEJ6v1A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xinput9_1_0.dll

Files

xinput9_1_0.dll
.dll windows:6 windows x86 arch:x86

fa2645f1904bcefa56bcf15ca3dde2b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
CreateThread
LoadLibraryW
GetSystemDirectoryW
GetProcAddress
FindFirstFileW
FindClose
CreateFileW
GetLocaleInfoEx
FormatMessageA
LocalFree
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
WideCharToMultiByte
GetFileInformationByHandleEx
GetLastError
CloseHandle
AreFileApisANSI
GetFileAttributesExW
UnhandledExceptionFilter

msvcp140

?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z

vcruntime140

__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
_CxxThrowException
__std_type_info_destroy_list
memset
_except_handler4_common
memcpy
memmove

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_execute_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
terminate
_initialize_narrow_environment

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

Exports

Exports

XInputGetCapabilities
XInputGetDSoundAudioDeviceGuids
XInputGetState
XInputSetState

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa2645f1904bcefa56bcf15ca3dde2b2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1KB - Virtual size: 1KB