DeviceDisplayStatusManager.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DeviceDisplayStatusManager.dll
Resource
win10v2004-20240508-en
General
-
Target
DeviceDisplayStatusManager.dll
-
Size
29KB
-
MD5
393a096cb6dccc9409b1f325021e602a
-
SHA1
9299eb29b64f31e4c811a7b9fea68f259f8bc008
-
SHA256
9af45ab1a6216834115129575ab704bd0bc34b3ff3f291893220841c5146881e
-
SHA512
553d88d80e110a3d853a7d5027da0499222a524c6b796343b859acc42a1000168e26c4b557d3e3c7e8228ecf5a9effaf404b053ecf9311c465153425007dcaec
-
SSDEEP
384:O6/i/M7o2ANPhdI+ZHlGiz6WYdc3U3Uu731pnWRcbtlM+wx6zqVdZ/4fGp0dPEWQ:UKoPlhdD7dYdJkuL1gROPqzZaPH+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DeviceDisplayStatusManager.dll
Files
-
DeviceDisplayStatusManager.dll.dll windows:10 windows x86 arch:x86
e5418b9e5285a201bf01bf154c56064f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
qsort
malloc
_lock
_purecall
__CxxFrameHandler3
_initterm
_unlock
_wcsicmp
_amsg_exit
_XcptFilter
_callnewh
_vsnwprintf
free
wcsncmp
_except_handler4_common
_onexit
__dllonexit
memcpy
memset
api-ms-win-core-winrt-error-l1-1-1
RoOriginateError
api-ms-win-core-libraryloader-l1-2-0
DisableThreadLibraryCalls
api-ms-win-core-util-l1-1-0
DecodePointer
EncodePointer
api-ms-win-core-synch-l1-2-0
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
Sleep
ReleaseSRWLockShared
AcquireSRWLockShared
api-ms-win-core-com-l1-1-1
StringFromGUID2
CLSIDFromString
CoTaskMemFree
IIDFromString
CoTaskMemAlloc
CoCreateInstance
PropVariantClear
api-ms-win-core-registry-l1-1-0
RegGetValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-2
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
api-ms-win-core-sysinfo-l1-2-1
GetSystemTimeAsFileTime
GetTickCount
api-ms-win-core-errorhandling-l1-1-1
SetUnhandledExceptionFilter
UnhandledExceptionFilter
propsys
PSGetPropertyDescriptionListFromString
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ