ProximityCommon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ProximityCommon.dll
Resource
win10v2004-20240508-en
General
-
Target
ProximityCommon.dll
-
Size
123KB
-
MD5
83e66f29ed264f232f95714548e901c8
-
SHA1
280ac09acddcb6e041a862823c46f5dd503b326e
-
SHA256
8a372d4ee18803475c2b0497d03532d7d79a3e3bdabf2f8d95d18c76fd966dad
-
SHA512
4c19b580df19a9408ad5bfab9a04eaaefcb5a9c4504a537a8a8fa4355d839557360bbf4641762b5f9d3f209d4aae0fb55abfb545430279cd18d1d8af33ead9b4
-
SSDEEP
1536:VVnp6FotNh3nyJpDyVD5PwYDZhj0njSA49xOWtqGF/rmd4YM2JIqToRyPn7ibe5+:VVnoFotNh3bIYtF/4Fc4uq5Vi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ProximityCommon.dll
Files
-
ProximityCommon.dll.dll windows:10 windows x86 arch:x86
a040bd01dc84d3dfb3542d41f7253391
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_onexit
__dllonexit
_unlock
_vsnwprintf
memcmp
_lock
_except_handler4_common
_initterm
malloc
_amsg_exit
free
_XcptFilter
_callnewh
memset
api-ms-win-core-registry-l1-1-0
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
api-ms-win-core-com-l1-1-0
CoGetMalloc
CoInitializeEx
CoUninitialize
CoTaskMemAlloc
CoSetProxyBlanket
CoTaskMemFree
CLSIDFromString
CoGetClassObject
CoCreateInstance
api-ms-win-eventing-classicprovider-l1-1-0
GetTraceEnableLevel
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableFlags
UnregisterTraceGuids
TraceMessage
api-ms-win-core-libraryloader-l1-2-0
LoadLibraryExW
GetProcAddress
DisableThreadLibraryCalls
FreeLibrary
api-ms-win-eventing-provider-l1-1-0
EventUnregister
EventSetInformation
EventWriteTransfer
EventRegister
api-ms-win-core-processthreads-l1-1-0
GetCurrentProcess
TerminateProcess
TlsAlloc
GetCurrentProcessId
TlsGetValue
GetCurrentThreadId
TlsSetValue
TlsFree
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetComputerNameExW
GetTickCount
GetSystemTimeAsFileTime
proximitycommonpal
PAL_QueryTransientObjectSecurityAttribute
PAL_UnregisterAppSuspendResumeCallback
PAL_GetAppPlatformQualifier
PAL_GetSupportedBrowseTypes
PAL_RegisterAppSuspendResumeCallback
PAL_FreeTransientObjectSecurityAttribute
api-ms-win-core-synch-l1-1-0
CreateEventW
LeaveCriticalSection
InitializeCriticalSection
SetEvent
InitializeCriticalSectionEx
WaitForSingleObject
DeleteCriticalSection
EnterCriticalSection
api-ms-win-core-threadpool-l1-2-0
CloseThreadpoolIo
WaitForThreadpoolIoCallbacks
CreateThreadpoolIo
CreateThreadpoolWork
StartThreadpoolIo
CancelThreadpoolIo
CloseThreadpoolWork
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
WaitForThreadpoolWorkCallbacks
SubmitThreadpoolWork
CreateThreadpoolWait
CallbackMayRunLong
api-ms-win-core-handle-l1-1-0
DuplicateHandle
CloseHandle
api-ms-win-core-shlwapi-obsolete-l1-1-0
QISearch
api-ms-win-core-string-l1-1-0
CompareStringOrdinal
api-ms-win-core-file-l1-1-0
CompareFileTime
api-ms-win-core-io-l1-1-0
GetOverlappedResult
DeviceIoControl
CancelIoEx
api-ms-win-core-winrt-string-l1-1-0
HSTRING_UserFree
HSTRING_UserMarshal
HSTRING_UserUnmarshal
HSTRING_UserSize
api-ms-win-core-delayload-l1-1-1
ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0
DelayLoadFailureHook
Exports
Exports
DllCanUnloadNow
DllGetClassObject
GetProxyDllInfo
Sections
.text Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ