DeviceDisplayStatusManager.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DeviceDisplayStatusManager.dll
Resource
win10v2004-20240508-en
General
-
Target
DeviceDisplayStatusManager.dll
-
Size
29KB
-
MD5
0d2f1a770369cc1ff62f24ce2d05e7c7
-
SHA1
64711531c3800b1151f23f5a914d53a631a6db25
-
SHA256
01f5be143241a7a1ae1904e167e3bca53e247fce8fb008879d6598dd8d642332
-
SHA512
cb435294481db36a99bfb699e763eb05ec7c6555906f748a958c48d996b1c3e28698f2b81df09b47551c0bffe58feee505dbbe7d9973a06b2f3952c2cc62cfa0
-
SSDEEP
384:3AtZM7ob9kI+A8BhlikVo2XLUXU9r31CnCxSzM8Mtwx6zqVdZFxfOp0dPQWQfWVX:QaohkDHDPofE971XxvRqzZVPa6ce
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DeviceDisplayStatusManager.dll
Files
-
DeviceDisplayStatusManager.dll.dll windows:10 windows x86 arch:x86
e5418b9e5285a201bf01bf154c56064f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
qsort
malloc
_lock
_purecall
__CxxFrameHandler3
_initterm
_unlock
_wcsicmp
_amsg_exit
_XcptFilter
_callnewh
_vsnwprintf
free
wcsncmp
_except_handler4_common
_onexit
__dllonexit
memcpy
memset
api-ms-win-core-winrt-error-l1-1-1
RoOriginateError
api-ms-win-core-libraryloader-l1-2-0
DisableThreadLibraryCalls
api-ms-win-core-util-l1-1-0
DecodePointer
EncodePointer
api-ms-win-core-synch-l1-2-0
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
Sleep
ReleaseSRWLockShared
AcquireSRWLockShared
api-ms-win-core-com-l1-1-1
StringFromGUID2
CLSIDFromString
CoTaskMemFree
IIDFromString
CoTaskMemAlloc
CoCreateInstance
PropVariantClear
api-ms-win-core-registry-l1-1-0
RegGetValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-2
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
api-ms-win-core-sysinfo-l1-2-1
GetSystemTimeAsFileTime
GetTickCount
api-ms-win-core-errorhandling-l1-1-1
SetUnhandledExceptionFilter
UnhandledExceptionFilter
propsys
PSGetPropertyDescriptionListFromString
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ