DefaultDeviceManager[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DefaultDeviceManager.dll
Size

9KB
MD5

e620052bf5dadaf86bc6a2ba680e1af1
SHA1

a11c29db05d4be85feecf0ad59e3da26cc3530b2
SHA256

9eaa112873cef282267005b41ba36cf5036a9ca61d4ffad6d89a6bae06a516a9
SHA512

d663d91b47b7071fb8a97a7192917bc08f6c63bc70c78b8530d35488e87737f9787fd9bb1e7369f0ecf7276c9aa8753596f9feaff100f892454af475324bbc96
SSDEEP

192:arWIQVlazG4ouT/VeiiQuQ0F3aW9RW+e2:8WIQVlazG4oQNtIDYW9RWD2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DefaultDeviceManager.dll

Files

DefaultDeviceManager.dll
.dll windows:6 windows x86 arch:x86

9ac726911dc325a30b2e451072a4e901

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DefaultDeviceManager.pdb

Imports

msvcrt

_except_handler4_common
_initterm
_amsg_exit
_XcptFilter
_callnewh
malloc
free

kernel32

QueryPerformanceCounter
DisableThreadLibraryCalls
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
Sleep

ole32

CoCreateInstance

shlwapi

ord219

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 706B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ