DeviceUxRes[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DeviceUxRes.dll
Size

11KB
MD5

edff3bb9a0ec219cadf1f0108cc0aabb
SHA1

7443b43ca2823862b26c98c5c2d3f2752263783a
SHA256

af2049c3ca086f11ed97c55f6ea6444d30b15c11580ae4bfceb620a804f73899
SHA512

73d2cdcb2718085e13d56da16d3a180cc3697c61210b318b453880060b17262799bdc1533dd469d7d2aeff444273bab81baf5489272fd39969159117f7a1541c
SSDEEP

192:NfULeT79WPUVoWGEaWH2mIDCuoCbzsL69LB1J/bzEJsTwX6:NfUqTJWPSoWtrZu8L69LVUsTwX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeviceUxRes.dll

Files

DeviceUxRes.dll
.dll windows:6 windows x86 arch:x86

e6e3d1f44ed89a0ca73fd93fedb1146c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DeviceUxRes.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-processthreads-l1-1-2

GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetSystemTimeAsFileTime

Sections

.text
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ