PlayToStatusProvider.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PlayToStatusProvider.dll
Resource
win10v2004-20240508-en
General
-
Target
PlayToStatusProvider.dll
-
Size
29KB
-
MD5
6f9498255018c9775be212f662aa65cf
-
SHA1
a8a2d935401e5723997a8fa9b12cd9720b2c2fce
-
SHA256
57183642f266084f05fbb9e982ba403c590e21ec2bd956d1235b3b9c5278217b
-
SHA512
d3131b62a5066b242fd3b41736d6acf05a30cbc00f0e3d7556bb1bb151916c7ab21d13a9e1a8f6dfd341d081c38eea1c0c4bc0d915051567484c129f4ab651de
-
SSDEEP
384:HGXd1dE9OyUQeTuKAyAKVF7UjJ6Jjs7+OkO28JoSA7E7ktFny4u7Hf27ij19/Epq:HGLvyHey9yAK0tgO/FQkynyZ6ixEpPi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PlayToStatusProvider.dll
Files
-
PlayToStatusProvider.dll.dll windows:10 windows x86 arch:x86
43e63f427b68a4e2cf7c2ada0fdd6ab2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_callnewh
malloc
free
_purecall
_XcptFilter
_amsg_exit
_initterm
?terminate@@YAXXZ
_except_handler4_common
_lock
_unlock
__dllonexit
_onexit
memcpy
__CxxFrameHandler3
memset
cfgmgr32
DevCloseObjectQuery
DevFreeObjectProperties
DevGetObjectProperties
api-ms-win-core-shlwapi-obsolete-l1-1-0
StrCmpIW
api-ms-win-core-winrt-l1-1-0
RoActivateInstance
RoGetActivationFactory
api-ms-win-core-winrt-string-l1-1-0
WindowsConcatString
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringRawBuffer
advapi32
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
TraceMessage
kernel32
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
SleepConditionVariableSRW
GetTickCount
CreateEventExW
WaitForSingleObject
GetLastError
SetEvent
ResetEvent
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
DisableThreadLibraryCalls
DeleteCriticalSection
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
CreateEventW
ole32
CoWaitForMultipleHandles
CoTaskMemFree
PropVariantCopy
CoCreateFreeThreadedMarshaler
CoGetMalloc
StringFromGUID2
PropVariantClear
CoCreateInstance
CoTaskMemAlloc
user32
LoadStringW
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ