DeviceUxRes[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DeviceUxRes.dll
Size

11KB
MD5

60d2794e57f57ab9a7c8727aa7f191c8
SHA1

7ec664820446bb357eac044c7b16cc12fb6c7e63
SHA256

7d8d2e217dd00da8ca77f9eca1bb259f0c7fcb8f8506f52d32bf1f30c6495735
SHA512

bcf215b4101dec974852b6b798ec261838b6932c7f1e20caf6f4812050dd5aaf6996dc19802ffe4dc187b6ec0e234db79bff0b4b766e3b5914579c69dd52f482
SSDEEP

192:NJFGHbLe/7ZWxoWIEaWH2mIDCuoCbzsL69LB1J/bzEJsTwX6:NJFGHbq/9WxoWvrZu8L69LVUsTwX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeviceUxRes.dll

Files

DeviceUxRes.dll
.dll windows:6 windows x86 arch:x86

e6e3d1f44ed89a0ca73fd93fedb1146c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DeviceUxRes.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-processthreads-l1-1-2

GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetSystemTimeAsFileTime

Sections

.text
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ