DeviceDisplayStatusManager[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

DeviceDisplayStatusManager.dll
Size

31KB
MD5

3a9295754de4952080444ae5303c73e2
SHA1

9d0e4fc588d11846eb6e2b834b864b2a094b542d
SHA256

45aee36f0cd305d19d58af3a2806d390408adce121328865805f1adb2b0bbf45
SHA512

452216baf1ba4ca04e408f4dd5cfbf3abb25cc09f6c6f2ccf37a73dcf09e7849081d9ed668eb83ae46d7b5059896aad6fbf3bf5bebafe69cceff925090f4445d
SSDEEP

384:n5HClM7B4aZ747Cqx0hospgXRovucTEbC3jqTxc3xbL/YasscTG5v5q8mJVN/ypy:n4cB07CposG4x0Z+Jz3WZzs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeviceDisplayStatusManager.dll

Files

DeviceDisplayStatusManager.dll
.dll windows:10 windows x86 arch:x86

dcdf89ef2b75a06131550660b53a22da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DeviceDisplayStatusManager.pdb

Imports

msvcrt

_amsg_exit
_XcptFilter
_callnewh
_unlock
_initterm
__CxxFrameHandler3
qsort
__dllonexit
_onexit
_except_handler4_common
_wcsicmp
memcpy
_vsnwprintf
wcsncmp
_purecall
free
malloc
_lock
memset

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError

api-ms-win-eventing-classicprovider-l1-1-0

UnregisterTraceGuids
GetTraceEnableLevel
RegisterTraceGuidsW
GetTraceLoggerHandle
TraceMessage
GetTraceEnableFlags

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
InitializeSRWLock

api-ms-win-core-synch-l1-2-0

Sleep
InitOnceExecuteOnce

api-ms-win-core-com-l1-1-0

CLSIDFromString
StringFromGUID2
CoTaskMemFree
IIDFromString
CoCreateInstance
CoTaskMemAlloc
PropVariantClear

api-ms-win-core-registry-l1-1-0

RegGetValueW
RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter

propsys

PSGetPropertyDescriptionListFromString

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dcdf89ef2b75a06131550660b53a22da

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-eventing-classicprovider-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

propsys

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.data Size: 512B - Virtual size: 1024B

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.data
Size: 512B - Virtual size: 1024B

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB