dispci.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dispci.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
dispci.dll
Resource
win10v2004-20240426-en
General
-
Target
dispci.dll
-
Size
56KB
-
MD5
72e8238ebfe77174dec62929c9706511
-
SHA1
903fdff798fc1614f9e80b2d320dcf23d4eb63e4
-
SHA256
b639d60d5ddb19b701bf4171616094924adc99968a66a92d43e6147c746d3c65
-
SHA512
84e0bc8c41e6952bf6bb6c56e34692759c2e7067d08254f695c606781a161c16538b53e3d1931866213f9292e6dfdfd16668773e56b6a35e1f63717016433168
-
SSDEEP
768:+pRA8+ZkQJgIiYFX+kvsY6go7t35QBGcMUBvfHijRX:+p0DdF/b677t36z9CjRX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dispci.dll
Files
-
dispci.dll.dll windows:6 windows x64 arch:x64
db4665f6526521cc9533b4ae2af40357
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_wcsicmp
__C_specific_handler
memcpy
malloc
free
_amsg_exit
_XcptFilter
swscanf_s
memmove
wcsnlen
wcsncpy_s
_wcsnicmp
wcsstr
_wcsupr
_vsnwprintf
_initterm
memset
ntdll
WinSqmStartSession
WinSqmAddToStream
WinSqmEndSession
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WinSqmAddToStreamEx
advapi32
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
ole32
StringFromIID
CoTaskMemFree
CoCreateGuid
shlwapi
ord158
SHDeleteKeyW
user32
CharUpperW
EnumDisplayDevicesW
gdi32
D3DKMTEscape
D3DKMTOpenAdapterFromDeviceName
D3DKMTCloseAdapter
D3DKMTEnumAdapters
kernel32
EnterCriticalSection
GetSystemTimeAsFileTime
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetLastError
LocalFree
LocalAlloc
ResolveDelayLoadedAPI
DelayLoadFailureHook
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetTickCount64
GetVersionExW
lstrcmpiW
CompareFileTime
UnhandledExceptionFilter
WideCharToMultiByte
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
Sleep
Exports
Exports
DisplayClassInstaller
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 756B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ