DeviceUxRes[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DeviceUxRes.dll
Size

12KB
MD5

8b76343283a4cefe5bea068cca7e3edc
SHA1

c7ae7bd845a28497f8a1da8b1a4e7ad7fe5d4562
SHA256

a2c518251dce6b5be9c194b484cfe7c52bbffeb794bc42701e996da5c0a94a21
SHA512

c5f7e5ac9657e3900a65a0e67d31a7750ce905576178336aca976dcbf506f10ca1a617d8194c943e1ec05a43550e40ea0e996c560f3b65887efb6bfb7a807e2d
SSDEEP

192:gph4/Mk8dlchaM7WWzoWKaWj5DCr+s94MIL69LYxD05M5:jGlccMSWzoWKrofKLL69L8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeviceUxRes.dll

Files

DeviceUxRes.dll
.dll windows:10 windows x86 arch:x86

38657e7c339116aa7ab2794c8f34e3ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DeviceUxRes.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

Sections

.text
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ