PlayToStatusProvider.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PlayToStatusProvider.dll
Resource
win10v2004-20240508-en
General
-
Target
PlayToStatusProvider.dll
-
Size
29KB
-
MD5
4f89ab181279e330f92c3ba38309208c
-
SHA1
3bd060d0b1f6c11e1a3ebf9a4d001f192c9b268e
-
SHA256
f78b026a8596940d54b0e0f194e1799f3ad586a35ce000cbef519c53c420c574
-
SHA512
bf345a1b25bbb1c182dfe6a7d8dc7cd6393847b84c26ee165178f5797ee00521683c1b189a083b17a6f3ac20a1165502a8c4a70abed2a965452811af7cd665ac
-
SSDEEP
384:HNe8SdE9+vbZt9Z7Aul1EAJOIa4OeOMFQoSA7E7kSBHG3kHf27ij19/EpiWprWjF:HN8fvbZR7AuwQO/FQkZHUrixEpNg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PlayToStatusProvider.dll
Files
-
PlayToStatusProvider.dll.dll windows:10 windows x86 arch:x86
43e63f427b68a4e2cf7c2ada0fdd6ab2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_callnewh
malloc
free
_purecall
_XcptFilter
_amsg_exit
_initterm
?terminate@@YAXXZ
_except_handler4_common
_lock
_unlock
__dllonexit
_onexit
memcpy
__CxxFrameHandler3
memset
cfgmgr32
DevCloseObjectQuery
DevFreeObjectProperties
DevGetObjectProperties
api-ms-win-core-shlwapi-obsolete-l1-1-0
StrCmpIW
api-ms-win-core-winrt-l1-1-0
RoActivateInstance
RoGetActivationFactory
api-ms-win-core-winrt-string-l1-1-0
WindowsConcatString
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringRawBuffer
advapi32
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
TraceMessage
kernel32
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
SleepConditionVariableSRW
GetTickCount
CreateEventExW
WaitForSingleObject
GetLastError
SetEvent
ResetEvent
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
DisableThreadLibraryCalls
DeleteCriticalSection
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
CreateEventW
ole32
CoWaitForMultipleHandles
CoTaskMemFree
PropVariantCopy
CoCreateFreeThreadedMarshaler
CoGetMalloc
StringFromGUID2
PropVariantClear
CoCreateInstance
CoTaskMemAlloc
user32
LoadStringW
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ