DevicePairing.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DevicePairing.dll
Resource
win10v2004-20240426-en
General
-
Target
DevicePairing.dll
-
Size
495KB
-
MD5
07d29f3946ad87579be2ea39de243d3c
-
SHA1
c0cdfa102ae9e947f2d4559e91419801c6a89874
-
SHA256
148ce790fdeb88f469af7e20c40d077cb846ee0f5b46b6e306af4a75918c536e
-
SHA512
46090d7c3d2f310b8660570f0688598a3e3860d153206556211ea277816768210b59323d6e71af82a993149b9af6af1caa9d0ccba6582a5bda802d933f4d0a7d
-
SSDEEP
3072:y2oMLyHcFaE953a4WJdsMGdkcf4Su311PdfIYertn9bNBj4qaXubDFRUS9Cdx6d6:LF3a48Odff4VlloDNqZSeSwdxyk8d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DevicePairing.dll
Files
-
DevicePairing.dll.dll windows:10 windows x86 arch:x86
3cd04b3a01aaaea26261da78547943cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_except_handler4_common
realloc
_vsnwprintf
floor
_ftol2_sse
_ftol2
__RTDynamicCast
_errno
??1type_info@@UAE@XZ
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
_callnewh
_CxxThrowException
_XcptFilter
_amsg_exit
_initterm
_lock
_unlock
_onexit
_wcsicmp
memmove
_vsnprintf_s
_ui64tow_s
swscanf
__CxxFrameHandler3
memset
free
malloc
wcsncpy_s
_purecall
memcpy_s
__dllonexit
memcpy
shcore
ord187
SHCreateThread
ord241
ord244
SHStrDupW
shell32
ShellExecuteExW
SHExtractIconsW
ord893
ord100
shlwapi
StrChrW
StrToIntW
ord384
StrCmpIW
PathUnquoteSpacesW
PathRemoveBlanksW
windows.ui.immersive
ord100
ord101
api-ms-win-core-libraryloader-l1-2-0
GetModuleHandleW
LoadLibraryExW
FindResourceExW
LoadResource
LoadStringW
LockResource
FreeLibrary
GetModuleFileNameW
GetModuleHandleExW
SizeofResource
GetModuleHandleA
GetModuleFileNameA
DisableThreadLibraryCalls
GetProcAddress
api-ms-win-core-synch-l1-2-0
CreateMutexExW
EnterCriticalSection
CreateSemaphoreExW
InitOnceComplete
Sleep
InitOnceBeginInitialize
ReleaseSRWLockExclusive
OpenSemaphoreW
CreateMutexW
SetEvent
WaitForMultipleObjectsEx
ResetEvent
CreateEventExW
CreateEventW
ReleaseMutex
ReleaseSemaphore
AcquireSRWLockExclusive
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
WaitForSingleObjectEx
LeaveCriticalSection
api-ms-win-core-heap-l1-2-0
GetProcessHeap
HeapAlloc
HeapFree
api-ms-win-core-errorhandling-l1-1-1
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
SetLastError
RaiseException
api-ms-win-core-debug-l1-1-1
OutputDebugStringW
OutputDebugStringA
api-ms-win-core-processthreads-l1-1-2
TlsFree
GetCurrentThreadId
TlsGetValue
TlsSetValue
GetCurrentThread
TerminateProcess
TlsAlloc
GetCurrentProcessId
GetCurrentProcess
api-ms-win-core-localization-l1-2-1
FormatMessageW
GetLocaleInfoW
api-ms-win-core-handle-l1-1-0
DuplicateHandle
CloseHandle
api-ms-win-core-libraryloader-l1-2-2
LoadLibraryW
oleaut32
VarUI4FromStr
api-ms-win-eventing-classicprovider-l1-1-0
UnregisterTraceGuids
GetTraceEnableLevel
RegisterTraceGuidsW
GetTraceLoggerHandle
TraceMessage
GetTraceEnableFlags
api-ms-win-core-com-l1-1-1
RoGetAgileReference
CoTaskMemAlloc
CoInitializeEx
CoUninitialize
PropVariantClear
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoGetMalloc
CoCreateInstance
CoGetApartmentType
CoWaitForMultipleHandles
api-ms-win-core-string-l2-1-0
CharNextW
api-ms-win-core-registry-l1-1-0
RegCloseKey
RegGetValueW
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyExW
RegCreateKeyExW
RegDeleteValueW
api-ms-win-core-string-l1-1-0
CompareStringOrdinal
MultiByteToWideChar
api-ms-win-eventing-provider-l1-1-0
EventActivityIdControl
EventWriteTransfer
EventUnregister
EventSetInformation
EventWrite
EventRegister
api-ms-win-core-sysinfo-l1-2-1
GetTickCount
GetTickCount64
GetSystemTimeAsFileTime
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
rpcrt4
UuidToStringW
RpcStringFreeW
UuidFromStringW
api-ms-win-core-quirks-l1-1-0
QuirkIsEnabled
api-ms-win-devices-query-l1-1-1
DevFreeObjectProperties
DevCreateObjectQueryEx
DevCloseObjectQuery
DevCreateObjectQueryFromId
DevGetObjectProperties
deviceassociation
DafStartEnumCeremonies
DafCreateAssociationContext
DafMemFree
DafCloseAssociationContext
DafStartWriteCeremonyData
DafStartReadCeremonyData
DafStartRemoveAssociation
DafStartFinalize
DafSelectCeremony
DafCreateAssociationContextFromOobBlob
imm32
ImmDisableLegacyIME
kernel32
lstrcmpiW
GetUserDefaultUILanguage
MulDiv
ntdll
NtQuerySystemInformation
EtwTraceMessage
WinSqmAddToStreamEx
dui70
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z
?OnHosted@Element@DirectUI@@MAEXPAV12@@Z
?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z
?GetClassInfoPtr@Element@DirectUI@@SGPAUIClassInfo@2@XZ
?Register@Element@DirectUI@@SGJXZ
?DefaultAction@Element@DirectUI@@UAEJXZ
?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z
?SetLayout@Element@DirectUI@@QAEJPAVLayout@2@@Z
?SetAccessible@Element@DirectUI@@QAEJ_N@Z
?Create@FillLayout@DirectUI@@SGJPAPAVLayout@2@@Z
UnInitThread
RegisterPVLBehaviorFactory
UnInitProcessPriv
InitThread
InitProcessPriv
?RemoveAll@Element@DirectUI@@QAEJXZ
??1CritSecLock@DirectUI@@QAE@XZ
?IsRTLReading@Element@DirectUI@@UAE_NXZ
?IsContentProtected@Element@DirectUI@@UAE_NXZ
?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z
?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z
?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z
?GetKeyFocused@Element@DirectUI@@UAE_NXZ
?SetAccName@Element@DirectUI@@QAEJPBG@Z
?SetAccDesc@Element@DirectUI@@QAEJPBG@Z
?SetTooltip@Element@DirectUI@@QAEJ_N@Z
?Create@TouchButton@DirectUI@@SGJPAVElement@2@PAKPAPAV32@@Z
??0ClassInfoBase@DirectUI@@QAE@XZ
??1ClassInfoBase@DirectUI@@UAE@XZ
?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z
?Register@ClassInfoBase@DirectUI@@QAEJXZ
?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z
?AddRef@ClassInfoBase@DirectUI@@UAEXXZ
?Release@ClassInfoBase@DirectUI@@UAEHXZ
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ
?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ
?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z
?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z
?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ
?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ
?AddChild@ClassInfoBase@DirectUI@@UAEXXZ
?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ
?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ
?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z
?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnDestroy@Element@DirectUI@@UAEXXZ
?Add@Element@DirectUI@@UAEJPAPAV12@I@Z
?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z
?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z
?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z
?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z
?SetKeyFocus@Element@DirectUI@@UAEXXZ
?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z
?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ
?DesiredSizeProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z
?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z
?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z
?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ
?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z
?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z
?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ
?OnHosted@TouchButton@DirectUI@@UAEXPAVElement@2@@Z
?OnUnHosted@TouchButton@DirectUI@@UAEXPAVElement@2@@Z
?OnInput@TouchButton@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnPropertyChanged@TouchButton@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnEvent@TouchButton@DirectUI@@UAEXPAUEvent@2@@Z
?DefaultAction@TouchButton@DirectUI@@UAEJXZ
?GetImmersiveFocusRectOffsets@TouchButton@DirectUI@@UAEXPAUtagRECT@@@Z
?GetForegroundColorRef@TouchButton@DirectUI@@UAEJPAK@Z
?PressedProp@TouchButton@DirectUI@@SGPBUPropertyInfo@2@XZ
?GetClassInfoPtr@TouchButton@DirectUI@@SGPAUIClassInfo@2@XZ
?Register@TouchButton@DirectUI@@SGJXZ
??0TouchButton@DirectUI@@QAE@XZ
?Initialize@TouchButton@DirectUI@@QAEJIPAVElement@2@PAK@Z
??1TouchButton@DirectUI@@UAE@XZ
?FireClickEvent@TouchButton@DirectUI@@UAEXIIW4ClickDevice@12@PAUtagPOINT@@@Z
?FireRightClickEvent@TouchButton@DirectUI@@UAEXIPAUtagPOINT@@@Z
?Paint@RichText@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?GetContentSize@RichText@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?GetTrimmedLineCount@RichText@DirectUI@@QAEKXZ
?GetWidth@Element@DirectUI@@QAEHXZ
?GetHeight@Element@DirectUI@@QAEHXZ
?GetPadding@Element@DirectUI@@QAEPBUtagRECT@@PAPAVValue@2@@Z
?SetHeight@Element@DirectUI@@QAEJH@Z
?Destroy@DUIXmlParser@DirectUI@@QAEXXZ
?CreateGraphic@Value@DirectUI@@SGPAV12@PAUHICON__@@_N11@Z
?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z
?ContentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
GetScaleFactor
?GetChildren@Element@DirectUI@@QAEPAV?$DynamicArray@PAVElement@DirectUI@@$0A@@2@PAPAVValue@2@@Z
?SetSelected@Element@DirectUI@@QAEJ_N@Z
?SetEnabled@Element@DirectUI@@QAEJ_N@Z
?SetMinSize@Element@DirectUI@@QAEJHH@Z
?SetOverrideScaleFactor@DUIXmlParser@DirectUI@@QAEXM@Z
?ManipulationStarted@TouchScrollViewer@DirectUI@@SG?AVUID@@XZ
?Destroy@Element@DirectUI@@QAEJ_N@Z
?Add@Element@DirectUI@@QAEJPAV12@@Z
?Insert@Element@DirectUI@@QAEJPAV12@I@Z
?Remove@Element@DirectUI@@QAEJPAV12@@Z
?GetImmediateChild@Element@DirectUI@@QAEPAV12@PAV12@@Z
?GetRoot@Element@DirectUI@@QAEPAV12@XZ
?GetClassInfoPtr@ScrollViewer@DirectUI@@SGPAUIClassInfo@2@XZ
?Scroll@BaseScrollBar@DirectUI@@SG?AVUID@@XZ
DuiCreateObject
?Release@Value@DirectUI@@QAEXXZ
?UserTextChanged@TouchEditBase@DirectUI@@SG?AVUID@@XZ
?GetCheckedState@TouchCheckBox@DirectUI@@QAE?AW4CheckedStateFlags@2@XZ
?GetClassInfoPtr@TouchEdit2@DirectUI@@SGPAUIClassInfo@2@XZ
?SetInputScope@TouchEdit2@DirectUI@@QAEJW4__MIDL___MIDL_itf_inputscope_0000_0000_0001@@@Z
?GetContentString@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z
?SetVisible@Element@DirectUI@@QAEJ_N@Z
?SetLayoutPos@Element@DirectUI@@QAEJH@Z
?SetContentString@Element@DirectUI@@QAEJPBG@Z
?SetID@Element@DirectUI@@QAEJPBG@Z
?SetAccValue@Element@DirectUI@@QAEJPBG@Z
?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z
?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
StrToID
?Click@TouchButton@DirectUI@@SG?AVUID@@XZ
?Click@Button@DirectUI@@SG?AVUID@@XZ
??1Element@DirectUI@@UAE@XZ
??0Element@DirectUI@@QAE@XZ
?OnPropertyChanged@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?KeyFocusedProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?Initialize@Element@DirectUI@@QAEJIPAV12@PAK@Z
gdi32
GetCurrentDpiInfo
GetStockObject
user32
GetMonitorInfoW
MonitorFromWindow
GetProcessDefaultLayout
GetWindowRect
MsgWaitForMultipleObjectsEx
PeekMessageW
PostQuitMessage
TranslateMessage
RegisterClassW
LoadCursorW
DispatchMessageW
DestroyIcon
GetWindowLongW
SetTimer
KillTimer
CreateWindowExW
UnregisterClassW
SetWindowTextW
ord2574
DefWindowProcW
SetWindowLongW
PostMessageW
GetPropW
SendMessageW
DestroyWindow
RemovePropW
SetPropW
GetParent
LoadImageW
FindWindowExW
GetClassNameW
UnregisterClassA
IsWindow
IsWindowVisible
IsIconic
ShowWindow
GetWindow
SetForegroundWindow
GetCursorPos
MonitorFromPoint
SetCursor
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 257KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ