dciman32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dciman32.dll
Resource
win10v2004-20240426-en
General
-
Target
dciman32.dll
-
Size
11KB
-
MD5
70c038bb7a83577685f82a561ef609e3
-
SHA1
e3ff50a09534b6185f1a1ceaae3d54197d318423
-
SHA256
3722bef1d0d53e4c90d47927990320b08cd5dc32ff80b42be8620266c826ca6c
-
SHA512
1c8bf7783b9addb2cf21604448f3866f30c4a4a91ca79b5279a58764eb0b558d49c63a281b292b9e8542d3a801cd77b296dab48a517a595b0cd9e49ebe2a40b8
-
SSDEEP
192:Mx6SoXFxrAdNVpTN+wI7sFGZN7EJ3Dk/WmHOWpPcG:nxkzvTN+wI7sFGzkk/WmOW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dciman32.dll
Files
-
dciman32.dll.dll windows:10 windows x86 arch:x86
96c5a4d5a0f41234d0db8450f0085e04
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_except_handler4_common
malloc
free
_amsg_exit
memcpy
_XcptFilter
_initterm
memset
kernel32
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
GetProcAddress
LocalFree
GetModuleHandleW
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
DisableThreadLibraryCalls
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
gdi32
GdiEntry3
GetRandomRgn
GdiEntry2
CreateDCW
CreateRectRgn
DeleteDC
GetRegionData
GdiEntry6
GdiEntry10
GdiEntry1
DeleteObject
user32
GetSystemMetrics
ReleaseDC
GetDC
Exports
Exports
DCIBeginAccess
DCICloseProvider
DCICreateOffscreen
DCICreateOverlay
DCICreatePrimary
DCIDestroy
DCIDraw
DCIEndAccess
DCIEnum
DCIOpenProvider
DCISetClipList
DCISetDestination
DCISetSrcDestClip
GetDCRegionData
GetWindowRegionData
WinWatchClose
WinWatchDidStatusChange
WinWatchGetClipList
WinWatchNotify
WinWatchOpen
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ