Windows[.]Devices[.]Printers[.]Extensions[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Windows.Devices.Printers.Extensions.dll
Size

32KB
MD5

7a816d0541d00ebdb9e3e00c7053ec02
SHA1

47983a487751ba99602fe24c451eefe9fa5b62fa
SHA256

0fac2aa806635a6593a2d8569f1a261a986495bf4da56773962b1bbe3e3e7e3b
SHA512

2a12d41876e554c65710aa2ff197d6b97317cef45fe29d655c58a43a249e38a498386fc95417bda869fc4f983184443330df8f5689e8893c7b85c336eb83d9aa
SSDEEP

384:eJZxZe2AjQUtUj8wvfsD3vR1OqZD3geIp1rzfWQoxHuUl26+eRrISpN82tCULPTy:SxZ5jUtgNfsDeqZce21rzh6NDPg5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Windows.Devices.Printers.Extensions.dll

Files

Windows.Devices.Printers.Extensions.dll
.dll windows:6 windows x86 arch:x86

bab132e331cf4ef3b96b79f7c9fa887a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Windows.Devices.Printers.Extensions.pdb

Imports

msvcrt

__dllonexit
_unlock
_lock
_initterm
_onexit
malloc
free
_amsg_exit
_XcptFilter
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler3
_except_handler4_common
_purecall
memset

api-ms-win-core-com-l1-1-1

CoTaskMemFree
CoGetClassObject
CoTaskMemAlloc
CoGetMalloc
CoCreateFreeThreadedMarshaler
CoGetStdMarshalEx

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString
WindowsDeleteString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString

api-ms-win-core-synch-l1-2-0

ReleaseSRWLockShared
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
Sleep
InitializeSRWLock

api-ms-win-core-winrt-error-l1-1-1

RoOriginateErrorW
RoOriginateError

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

oleaut32

SysFreeString
SysAllocString

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-2

TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter
UnhandledExceptionFilter

api-ms-win-shcore-stream-l1-1-0

IStream_Write
IStream_Reset
SHCreateMemStream
IStream_Read

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bab132e331cf4ef3b96b79f7c9fa887a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-com-l1-1-1

api-ms-win-core-util-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-eventing-classicprovider-l1-1-0

oleaut32

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-shcore-stream-l1-1-0

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 24KB

.data Size: 512B - Virtual size: 900B

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 24KB - Virtual size: 24KB

.data
Size: 512B - Virtual size: 900B

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB