Windows[.]Devices[.]Printers[.]Extensions[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Windows.Devices.Printers.Extensions.dll
Size

29KB
MD5

332853f002869abd2f2c285e386e30ed
SHA1

6a2be045bb9b1f57da9ae060abe4463b1cce4c70
SHA256

8c9c0b31da05ffa9abbd9321dd066ac81d380ad86c1b95ffd496e47a8b663e14
SHA512

9db05586ef660206d38fa4b695e600c46e09491522508d7cddd07b717862be2f553bccc0a6f9d444f5fba7ee34686efac41024ff81972c21c7b98d9d8dce6cf5
SSDEEP

384:lIh3flVkyo5ZW2S+GRMx7vuSjGoHLB9mD9Z6Gl4aG0JWRVb5cKgsFGISpN82tCUF:sKQwmGu4aG0acxxPTDb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Windows.Devices.Printers.Extensions.dll

Files

Windows.Devices.Printers.Extensions.dll
.dll windows:6 windows x86 arch:x86

bab132e331cf4ef3b96b79f7c9fa887a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Windows.Devices.Printers.Extensions.pdb

Imports

msvcrt

__dllonexit
_unlock
_lock
_initterm
_onexit
malloc
free
_amsg_exit
_XcptFilter
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler3
_except_handler4_common
_purecall
memset

api-ms-win-core-com-l1-1-1

CoTaskMemFree
CoGetClassObject
CoTaskMemAlloc
CoGetMalloc
CoCreateFreeThreadedMarshaler
CoGetStdMarshalEx

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString
WindowsDeleteString
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsCreateString

api-ms-win-core-synch-l1-2-0

ReleaseSRWLockShared
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
Sleep
InitializeSRWLock

api-ms-win-core-winrt-error-l1-1-1

RoOriginateErrorW
RoOriginateError

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

oleaut32

SysFreeString
SysAllocString

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-2

TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter
UnhandledExceptionFilter

api-ms-win-shcore-stream-l1-1-0

IStream_Write
IStream_Reset
SHCreateMemStream
IStream_Read

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

minATL
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bab132e331cf4ef3b96b79f7c9fa887a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-com-l1-1-1

api-ms-win-core-util-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-eventing-classicprovider-l1-1-0

oleaut32

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-shcore-stream-l1-1-0

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 512B - Virtual size: 900B

.idata Size: 2KB - Virtual size: 2KB

minATL Size: 512B - Virtual size: 28B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 512B - Virtual size: 900B

.idata
Size: 2KB - Virtual size: 2KB

minATL
Size: 512B - Virtual size: 28B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB