C:\Users\ryoch\source\repos\ViGEmClient\bin\release\x64\ViGEmClient.pdb
Static task
static1
Behavioral task
behavioral1
Sample
vigemclient.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
vigemclient.dll
Resource
win10v2004-20240221-en
General
-
Target
vigemclient.dll
-
Size
171KB
-
MD5
97fa0ae0d994a8e9c523b190d4b69a1a
-
SHA1
f7cc9420ae9ced6204c4d140c84c347ea2cf142f
-
SHA256
e024fa8d2b0ae2262dd1b33170bf66735ebc721541666cfb421ed8b63d985805
-
SHA512
e0d91223e7a1673e560bc3742c3924af8e75d2bbff49f90644d21bd0e28e95ca1263cc025c41bd93a4989b57afbc5b6557adc2abe728004b10f5eee59941516c
-
SSDEEP
3072:Ushh0vWF7S5RnX6B0E7EiDASQKwwpJ1UtADKZBoTpanY0qVbn:Us/0+JSPX6Bx9kDKwycZRnY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource vigemclient.dll
Files
-
vigemclient.dll.dll windows:6 windows x64 arch:x64
65345f8102171959f4a01b23c3dd1996
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDevicePropertyW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
kernel32
RtlVirtualUnwind
WriteConsoleW
HeapReAlloc
HeapSize
DeviceIoControl
WaitForSingleObject
CreateFileW
CreateEventW
GetLastError
SetEvent
WaitForSingleObjectEx
CloseHandle
CancelIoEx
CreateThread
ResetEvent
GetOverlappedResult
WideCharToMultiByte
GetConsoleMode
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
QueryPerformanceCounter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
InitializeCriticalSectionAndSpinCount
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
Exports
Exports
vigem_alloc
vigem_connect
vigem_disconnect
vigem_free
vigem_target_add
vigem_target_add_async
vigem_target_ds4_alloc
vigem_target_ds4_await_output_report
vigem_target_ds4_await_output_report_timeout
vigem_target_ds4_register_notification
vigem_target_ds4_unregister_notification
vigem_target_ds4_update
vigem_target_ds4_update_ex
vigem_target_free
vigem_target_get_index
vigem_target_get_pid
vigem_target_get_type
vigem_target_get_vid
vigem_target_is_attached
vigem_target_is_waitable_add_supported
vigem_target_remove
vigem_target_set_pid
vigem_target_set_vid
vigem_target_x360_alloc
vigem_target_x360_get_user_index
vigem_target_x360_register_notification
vigem_target_x360_unregister_notification
vigem_target_x360_update
Sections
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ