DeviceSetupStatusProvider[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

DeviceSetupStatusProvider.dll
Size

28KB
MD5

a68262391b25cef3ab14f06913147841
SHA1

174c33e03ef45588654244b33db078a5901481ec
SHA256

ba83b299cbff1791c03670b55fcb2bc8e11d51b5453b36b83d496a5b978b1114
SHA512

4f1328d1749c028d34c116a08d397aa693c4bcb8b46faa78a535ce0a0163d577e2232f015515e34dda45236c8f61708bf0c8540ce2cbfe13396a446be2df5cbd
SSDEEP

768:z/pK7sXXgv7pkK81X2h7XRE4/1VhLo76/B9XgY:z/pK7sXU7pkK81XWRp7+76/B9XgY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeviceSetupStatusProvider.dll

Files

DeviceSetupStatusProvider.dll
.dll windows:10 windows x86 arch:x86

fb6e379188b46b2268d4ec131aa03f8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DeviceSetupStatusProvider.pdb

Imports

msvcrt

memcpy_s
_wcsupr
__CxxFrameHandler3
_initterm
_wcsnicmp
memcpy
_purecall
_amsg_exit
free
??1type_info@@UAE@XZ
malloc
_callnewh
_onexit
__dllonexit
_unlock
_lock
_except_handler4_common
_XcptFilter
?terminate@@YAXXZ
_CxxThrowException
memset

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
ReleaseSRWLockShared
EnterCriticalSection
CreateEventW
SetEvent
InitializeCriticalSection
LeaveCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockShared
AcquireSRWLockExclusive
InitializeSRWLock

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
TraceMessage
GetTraceEnableFlags

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
LoadStringW

api-ms-win-core-errorhandling-l1-1-0

GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-com-l1-1-0

CoCreateInstance
CoTaskMemFree
CLSIDFromString
PropVariantClear
CoInitializeEx
CoUninitialize
CoTaskMemAlloc
StringFromCLSID
PropVariantCopy

api-ms-win-devices-query-l1-1-0

DevCreateObjectQueryFromId
DevCreateObjectQuery
DevGetObjects
DevCloseObjectQuery
DevFreeObjects

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-registry-l1-1-0

RegGetValueW

api-ms-win-core-synch-l1-2-0

Sleep
WakeAllConditionVariable
SleepConditionVariableSRW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
TerminateProcess
GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb6e379188b46b2268d4ec131aa03f8f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-synch-l1-1-0

api-ms-win-eventing-classicprovider-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-devices-query-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-string-l2-1-1

api-ms-win-core-registry-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB