XInputGetCapabilities
XInputGetDSoundAudioDeviceGuids
XInputGetState
XInputSetState
Static task
static1
1 signatures
General
-
Target
xinput9_1_0.dll
-
Size
25KB
-
MD5
cd1c9f2b608a30d117d68699a3b677d1
-
SHA1
a34ec3c12095ef19dbea987cbe3603a7b429ecae
-
SHA256
ea0cdf5cf1a542c78176a5db692aa28c867520e42d47d8e0052338642ce107cd
-
SHA512
7c01ea563d55ac7adad2760de27e98ba4b38e06713a61628201aedfded468ca22b1183c98d2b6cd7c3f8bf98248022d2e3120220aaff5e2f0303935bd9d35f2b
-
SSDEEP
384:8pRgFrFGE3rwCryUmkMM5/Mg3NX5nuqLPZtxQSummJRftjInacQshLcICeA:v4kMe/j3eCxRmySE9
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource xinput9_1_0.dll
Files
-
xinput9_1_0.dll.dll windows:6 windows x86 arch:x86
8066e0e7ec12a0ccd92da4a844c2c3e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DisableThreadLibraryCalls
CreateThread
LoadLibraryW
GetSystemDirectoryW
GetProcAddress
FindClose
FindClose
CreateFileW
GetLocaleInfoEx
FormatMessageA
LocalFree
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcess
GetCurrentProcess
QueryPerformanceCounter
IsProcessorFeaturePresent
GetCurrentProcess
GetCurrentProcess
GetCurrentProcess
WideCharToMultiByte
GetLastError
GetLastError
CloseHandle
AreFileApisANSI
GetFileAttributesExW
UnhandledExceptionFilter
msvcp140
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
vcruntime140
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
_CxxThrowException
__std_type_info_destroy_list
memset
_except_handler4_common
memcpy
memmove
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_execute_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
terminate
_initialize_narrow_environment
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ