DeviceUxRes[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DeviceUxRes.dll
Size

9KB
MD5

7acc264046ec028aa1f3fd36554810d6
SHA1

c180f6d9321299c605463f56ee8479b2a9d1ada7
SHA256

6d06d818c9e194eb311ddcf50b7eb2526c6b01a0980c5ea2b354da220ddd7789
SHA512

8c6c3ba370d8fc1ab6a7921472d253781e8fb561ccdf56808fe52a86950257632ffcf54e9ceacfaaede35132e1e67c3af5bbf558d1041f50e0eb87303cba6545
SSDEEP

96:xKfF8YcDJdMa2bKveLOOEWPwioWwM2iaWJSnwKDleGleLZqR09pF3M11tCi:xKyYq7FWoioWKiaW6JLq9LO1gi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeviceUxRes.dll

Files

DeviceUxRes.dll
.dll windows:6 windows x86 arch:x86

bf9f2d739bba7d4519164780fb3876ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DeviceUxRes.pdb

Imports

api-ms-win-core-libraryloader-l1-1-0

DisableThreadLibraryCalls

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

Sections

.text
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ