SensorsNativeApi[.]V2[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

SensorsNativeApi.V2.dll
Size

228KB
MD5

59feff40b9256c7c618fbadc8f26a0ca
SHA1

31451052732c52d40aecedd1f0c92973719b1e79
SHA256

ae801b0d3885600151112f367f8e452ab56c6ec78791c1a09915e7c23cb6f421
SHA512

3f760bd2ae40d95eee3c1e62ef04746277d2ae03dbf7f518eceb2598e7ec8db8b97cc0308a4c84c06646f58b4378c1e6deb8982cb318590df635f35c126c51be
SSDEEP

3072:aal8orp1UkQ0goeqNprS7RPez8YgzouiOIS9nQM2JuPfyX/ZCLNmANhum:HjriRPeYYpuiOISgJuPqX/ZpKhn

Score

1^/10

Malware Config

Signatures

Files

SensorsNativeApi.V2.dll
.dll windows:10 windows x86 arch:x86

70436924f795ebf2db121b2053c2e9d0

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:29

Not After

02/12/2021, 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8b:02:f0:6f:55:52:e0:3d:d3:4c:ed:2f:c7:ff:db:43:27:b8:5e:d9:72:c0:90:10:4e:6b:0d:41:f1:f2:07:11
Signer

Actual PE Digest

8b:02:f0:6f:55:52:e0:3d:d3:4c:ed:2f:c7:ff:db:43:27:b8:5e:d9:72:c0:90:10:4e:6b:0d:41:f1:f2:07:11

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SensorsNativeApi.V2.pdb

Imports

msvcp_win

?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
?_Xbad_function_call@std@@YAXXZ
_Thrd_detach
?_Xlength_error@std@@YAXPBD@Z

api-ms-win-crt-string-l1-1-0

wcsncmp
memset

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__errno
_o__execute_onexit_table
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o___std_exception_destroy
memmove
_o__wcsnicmp
_o_ceil
_o_floor
_o_free
_o_malloc
_o_terminate
_o_wcscpy_s
_except_handler4_common
_o___std_exception_copy
_CxxThrowException
__std_terminate
_o__CIfmod
_o__CIcos
_o__CIatan2
_o__CIatan
_o__CIasin
_o__cexit
_o__callnewh
_o__beginthreadex
_o__crt_atexit
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o__CIsqrt
_o__configure_narrow_argv
__std_type_info_compare
__CxxFrameHandler3
memcmp
memcpy
_o___std_type_info_destroy_list

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
GetModuleHandleExA
GetProcAddress
FreeLibrary
GetModuleHandleW
GetModuleFileNameA

api-ms-win-core-synch-l1-1-0

ResetEvent
DeleteCriticalSection
CreateEventExW
CreateMutexExW
CreateEventW
OpenMutexW
ReleaseSRWLockShared
AcquireSRWLockShared
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
OpenEventW
ReleaseMutex
InitializeCriticalSection
TryAcquireSRWLockExclusive
WaitForSingleObject
InitializeCriticalSectionEx
LeaveCriticalSection
InitializeSRWLock
ReleaseSemaphore
EnterCriticalSection
SetEvent
CreateSemaphoreExW
WaitForMultipleObjectsEx
InitializeCriticalSectionAndSpinCount

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

RaiseException
SetUnhandledExceptionFilter
SetLastError
GetLastError
UnhandledExceptionFilter

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolCleanupGroupMembers
CreateThreadpoolWork
CloseThreadpoolTimer
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
SetThreadpoolThreadMaximum
WaitForThreadpoolTimerCallbacks
CloseThreadpoolCleanupGroup
SetThreadpoolThreadMinimum
CreateThreadpool
CloseThreadpool
CreateThreadpoolTimer
SetThreadpoolTimer

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-processthreads-l1-1-0

ResumeThread
GetCurrentThreadId
CreateThread
GetCurrentProcessId
GetCurrentProcess
GetThreadId
SuspendThread
TerminateProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
DebugBreak
IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventActivityIdControl
EventSetInformation
EventRegister
EventUnregister

api-ms-win-core-io-l1-1-0

GetOverlappedResult
CancelIoEx
DeviceIoControl

api-ms-win-power-setting-l1-1-0

PowerSettingUnregisterNotification
PowerSettingRegisterNotification

api-ms-win-core-file-l1-1-0

ReadFile
CreateFileW

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-processthreads-l1-1-1

GetThreadContext
IsProcessorFeaturePresent

api-ms-win-core-io-l1-1-1

GetOverlappedResultEx

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-devices-config-l1-1-1

CM_Get_Device_Interface_ListW
CM_MapCrToWin32Err
CM_Get_Device_Interface_PropertyW
CM_Unregister_Notification
CM_Register_Notification
CM_Get_Device_Interface_List_SizeW

api-ms-win-security-base-l1-1-0

AllocateLocallyUniqueId

api-ms-win-core-com-l1-1-0

StringFromGUID2
PropVariantClear
CoCreateInstance
CoWaitForMultipleHandles

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

propsys

InitPropVariantFromFileTime

sensorsutilsv2

ConvertCollectionToAccelerometerData
PropKeyFindKeyGetFileTime
PropKeyFindKeyGetFloat
CollectionsListUpdateMarshalledPointer
IsCollectionListSame
ConvertCollectionToLightSensorDataWithColor
CollectionsListAllocateBufferAndSerialize
CollectionsListCopyAndMarshall
SerializationBufferAllocate
CollectionsListDeserializeFromBuffer
SerializationBufferFree
PropKeyFindKeyGetGuid
PropKeyFindKeyGetUlong
ConvertCollectionToProximitySensorData
ConvertProximitySensorDataToCollection
ConvertOrientationDataToCollection
ConvertCollectionToOrientationData
PropKeyFindKeyGetBool
ConvertCollectionToMagnetometerData
ConvertMagnetometerDataToCollection
ConvertGyroscopeDataToCollection
ConvertCollectionToGyroscopeData
InitPropVariantFromFloat
ConvertCollectionToLightSensorData
ConvertLightSensorDataToCollection
PropKeyFindKeySetPropVariant
ConvertAccelerometerDataToCollection
PropKeyFindKeyGetPropVariant

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentPackageId

rpcrt4

RpcBindingCreateW
NdrClientCall4
RpcBindingFree
RpcBindingBind
I_RpcExceptionFilter

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

api-ms-win-core-memory-l1-1-0

OpenFileMappingW
UnmapViewOfFile
MapViewOfFile

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

DllMain
SensorCancelHistoryRetrievalV2
SensorClearHistoryV2
SensorCloseV2
SensorDeviceIoControlV2
SensorDisableIoPathForDataNotificationsV2
SensorDisableWakeV2
SensorEnableIdleOperationV2
SensorEnableWakeV2
SensorGetAccDataV2
SensorGetAlsDataV2
SensorGetAlsDataWithColorV2
SensorGetBarDataV2
SensorGetCapabilitiesCollectionV2
SensorGetCapabilitiesV2
SensorGetCurrentReadingV2
SensorGetDataCollectionV2
SensorGetDataDeliveryModeV2
SensorGetDataFieldPropertiesV2
SensorGetDataIntervalV2
SensorGetDataThresholdsV2
SensorGetDataV2
SensorGetDefaultDataThresholdsV2
SensorGetDeviceIdV2
SensorGetFifoMaxSizeV2
SensorGetFusDataV2
SensorGetGyrDataV2
SensorGetHistoryV2
SensorGetMagDataV2
SensorGetPropertiesV2
SensorGetPrxDataV2
SensorGetRangeResolutionV2
SensorGetSupportedDataFieldsV2
SensorIsWakeEnabledV2
SensorNotificationConfigureV2
SensorNotificationStartV2
SensorNotificationStopV2
SensorOpenByInterfaceV2
SensorOpenV2
SensorRegisterDeviceRemovalNotificationV2
SensorSetAccThresholdsV2
SensorSetAlsThresholdsV2
SensorSetAlsWithColorThresholdsV2
SensorSetBarThresholdsV2
SensorSetDataDeliveryModeV2
SensorSetDataIntervalV2
SensorSetDataThresholdsV2
SensorSetFusThresholdsV2
SensorSetGyrThresholdsV2
SensorSetMagThresholdsV2
SensorSetOrientationSensorThresholdsV2
SensorSetRangeResolutionV2
SensorSetReportLatencyV2
SensorStartCollectionV2
SensorStartHistoryV2
SensorStartStateChangeNotificationV2
SensorStartV2
SensorStopHistoryV2
SensorStopStateChangeNotificationV2
SensorStopV2
SensorUnregisterDeviceRemovalNotificationV2
SimpleOrientationClose
SimpleOrientationEnableInLowPowerMode
SimpleOrientationGetCapabilitiesCollectionV2
SimpleOrientationGetCurrentOrientation
SimpleOrientationGetDeviceId
SimpleOrientationGetProperties
SimpleOrientationOpen
SimpleOrientationRegisterDeviceRemovalNotification
SimpleOrientationStart
SimpleOrientationStop
SimpleOrientationUnregisterDeviceRemovalNotification

Sections

.text
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70436924f795ebf2db121b2053c2e9d0

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:edCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

8b:02:f0:6f:55:52:e0:3d:d3:4c:ed:2f:c7:ff:db:43:27:b8:5e:d9:72:c0:90:10:4e:6b:0d:41:f1:f2:07:11Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcp_win

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-io-l1-1-0

api-ms-win-power-setting-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-errorhandling-l1-1-2

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-io-l1-1-1

api-ms-win-core-synch-l1-2-1

api-ms-win-devices-config-l1-1-1

api-ms-win-security-base-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-wow64-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-interlocked-l1-1-0

propsys

sensorsutilsv2

api-ms-win-appmodel-runtime-l1-1-0

rpcrt4

api-ms-win-eventing-classicprovider-l1-1-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-delayload-l1-1-1

api-ms-win-core-delayload-l1-1-0

Exports

Exports

Sections

.text Size: 193KB - Virtual size: 192KB

.data Size: 1KB - Virtual size: 3KB

.idata Size: 8KB - Virtual size: 8KB

.didat Size: 512B - Virtual size: 12B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 11KB - Virtual size: 11KB

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

8b:02:f0:6f:55:52:e0:3d:d3:4c:ed:2f:c7:ff:db:43:27:b8:5e:d9:72:c0:90:10:4e:6b:0d:41:f1:f2:07:11
Signer

.text
Size: 193KB - Virtual size: 192KB

.data
Size: 1KB - Virtual size: 3KB

.idata
Size: 8KB - Virtual size: 8KB

.didat
Size: 512B - Virtual size: 12B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 11KB