TimeDateMUICallback[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TimeDateMUICallback.dll
Size

9KB
MD5

e0d5780ea502641b679c1fe48e54cb42
SHA1

e2198f159e236b7f803f78ef258a7aeab8e20d53
SHA256

0af21e3ea6b52fbebcd0d1d46eb923b146298b03ce83870a1a7aecfc107be563
SHA512

409207a987b34c07c9f713fe0de37c3f1c9bad06a76fcbae621146a283c555e12753d9e2a0201fc03da7f6b2e739b83a5c882245b156ad184725cbf8432777b8
SSDEEP

192:rguqtjOOksg/2lb+1SQfDmVHqWJc5PgWB:PqtKOksg/2VifDEqWi5PgWB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TimeDateMUICallback.dll

Files

TimeDateMUICallback.dll
.dll windows:10 windows x86 arch:x86

c2f889c87e92d394b4b378a32093a741

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

TimeDateMUICallback.pdb

Imports

msvcrt

_except_handler4_common
malloc
_initterm
_amsg_exit
_XcptFilter
free
_callnewh

kernel32

TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetThreadPreferredUILanguages
SetThreadPreferredUILanguages
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId

advapi32

RegCloseKey
RegEnumKeyW
RegOpenKeyExW
RegSetValueExW
RegLoadMUIStringW

Exports

Exports

OnMachineUILanguageSwitch

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ