DeviceUxRes[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DeviceUxRes.dll
Size

12KB
MD5

d70042f5b2327bb1eed686c2a9b0f9d6
SHA1

e71c28f1ea64feb96b2608e395ad6cb2412bfe8b
SHA256

63196df72444e501fed65aca0343f9d1299640a403da508812eb720cf6ece72b
SHA512

138ac643cf1bf914fc67ddc876c3f81989b3d210705870c8cf87627685fdfbe4000f30e1e94b9aeb11da87e9169be8dae8d7f37832c542d0ff90ae77b761aa12
SSDEEP

192:G7FFchaM7KW7oWCaWj5DCr+s94MIL69LYxD05M5:G7FFccMGW7oWCrofKLL69L8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeviceUxRes.dll

Files

DeviceUxRes.dll
.dll windows:10 windows x86 arch:x86

38657e7c339116aa7ab2794c8f34e3ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DeviceUxRes.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

Sections

.text
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ