MirrorDrvCompat.pdb
Static task
static1
Behavioral task
behavioral1
Sample
MirrorDrvCompat.dll
Resource
win10v2004-20240508-en
General
-
Target
MirrorDrvCompat.dll
-
Size
31KB
-
MD5
ed46b5209b593229c06a1e72e4da1b43
-
SHA1
6533fa6866ddf2587382164b246e4b4e164f638a
-
SHA256
ef1cda2ef53d9c2fcb6e345a9250ff041584f682daf55706994a1ebd0e6ba08a
-
SHA512
bb97b061b32109670f7b1ae29a3dcb0b638edf0ba8827b0b241f88d77e485c13ee2e0c4c2e282266117c3ec7c7e9067c1220386f48f8dc30ab04331f8d047776
-
SSDEEP
768:PmOmVnBPE+lvmREtaA7wTNx6Hw2XuDpi//6w2P:PmOmPFlvmiInoEi//6w2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MirrorDrvCompat.dll
Files
-
MirrorDrvCompat.dll.dll windows:10 windows x86 arch:x86
db7f450467797933ea452bff2e39d850
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_except_handler4_common
_initterm
_amsg_exit
_XcptFilter
_callnewh
malloc
free
_vsnwprintf
_wcsicmp
memset
ntdll
LdrResFindResource
WinSqmSetDWORD
WinSqmIncrementDWORD
WinSqmSetString
WinSqmSetDWORD64
api-ms-win-core-libraryloader-l1-2-0
DisableThreadLibraryCalls
GetModuleHandleExW
api-ms-win-eventing-classicprovider-l1-1-0
GetTraceEnableFlags
RegisterTraceGuidsW
TraceMessage
GetTraceEnableLevel
GetTraceLoggerHandle
UnregisterTraceGuids
api-ms-win-core-synch-l1-1-0
InitializeCriticalSection
SetEvent
ReleaseMutex
CreateEventW
WaitForMultipleObjectsEx
CreateMutexW
WaitForSingleObject
WaitForSingleObjectEx
EnterCriticalSection
LeaveCriticalSection
ResetEvent
api-ms-win-core-errorhandling-l1-1-0
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
CreateThread
GetCurrentProcess
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetTickCount
GetSystemTimeAsFileTime
d3d11
D3D11CreateDevice
dxgi
CreateDXGIFactory
CreateDXGIFactory1
user32
CloseDesktop
SetThreadDesktop
OpenInputDesktop
GetSystemMetrics
GetDC
ReleaseDC
IntersectRect
GetCursorInfo
DrawIconEx
ScrollDC
GetWindowLongW
EnumDisplayDevicesW
IsThreadDesktopComposited
UnregisterPowerSettingNotification
DispatchMessageW
TranslateMessage
GetMessageW
RegisterPowerSettingNotification
CreateWindowExW
DefWindowProcW
RegisterClassExW
SetWindowLongW
gdi32
CreateCompatibleDC
CreateDCW
StretchDIBits
DeleteObject
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
Exports
Exports
MirrorDrvLoadedNotify
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ