ext-ms-win-ntuser-misc-l1-2-0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ext-ms-win-ntuser-misc-l1-2-0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ext-ms-win-ntuser-misc-l1-2-0.dll
Resource
win10v2004-20240226-en
General
-
Target
ext-ms-win-ntuser-misc-l1-2-0.dll
-
Size
4KB
-
MD5
2d121a982b79f63e30659961f0dabc75
-
SHA1
d6b6d620344f4255ef67369999f0c5744c408239
-
SHA256
c82b3c82bcefd2e4a7897fcb4af7cb3b52bac6f769a35268373b0197c4ed204b
-
SHA512
97396034a1f5fd3cf51cd4b7680f70a07f1e592e2907e498e875bdb1f416461099c09ed5403a9d4001c931d6fee168c470050a6d24657af618b4863f80c918eb
-
SSDEEP
48:6yNDSUqIU7wJ2qT6tkA5ZuECzCkkqiIt40GIZWUnfBI56h/5Wwa:xNcISZuECukkqimGEW4UohWw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ext-ms-win-ntuser-misc-l1-2-0.dll
Files
-
ext-ms-win-ntuser-misc-l1-2-0.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
AttachThreadInput
CloseClipboard
CloseGestureInfoHandle
DrawTextExW
DrawTextW
EmptyClipboard
EnableScrollBar
ExitWindowsEx
GetClipboardData
GetClipboardFormatNameW
GetClipboardOwner
GetGestureConfig
GetGestureInfo
GetGuiResources
GetRawInputData
GetRawInputDeviceInfoW
GetRawInputDeviceList
GetScrollBarInfo
GetScrollInfo
GetScrollPos
GetTouchInputInfo
GetUserObjectSecurity
GetWindowFeedbackSetting
IsClipboardFormatAvailable
IsTouchWindow
KillTimer
MessageBeep
OpenClipboard
RegisterClipboardFormatA
RegisterClipboardFormatW
RegisterDeviceNotificationW
RegisterRawInputDevices
ScrollWindowEx
SetClipboardData
SetCoalescableTimer
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetUserObjectSecurity
SetWindowFeedbackSetting
ShowScrollBar
ShutdownBlockReasonCreate
ShutdownBlockReasonDestroy
TabbedTextOutW
UnregisterDeviceNotification
WaitForInputIdle
WinHelpW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ